HEIF Image Extension: Deserialization of Untrusted Data (CVE-2026-69694)
Published Sources: BSI
What is affected, what to do
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
Update Microsoft Windows 10 Version 1607 to version 10.0.14393.9512, Microsoft Windows 10 Version 1809 to version 10.0.17763.9245, Microsoft Windows 10 Version 21H2 to version 10.0.19044.7725.
- Affected
- Microsoft Windows 10 Version 1607
lt 10.0.14393.0..10.0.14393.9512 - Microsoft Windows 10 Version 1809
lt 10.0.17763.0..10.0.17763.9245 - Microsoft Windows 10 Version 21H2
lt 10.0.19044.0..10.0.19044.7725 - Microsoft Windows 10 Version 22H2
lt 10.0.19045.0..10.0.19045.7725 - Microsoft Windows 11 version 23H2
lt 10.0.22631.0..10.0.22631.7582 - Microsoft Windows 11 Version 24H2
lt 10.0.26100.0..10.0.26100.9445 - Microsoft Windows 11 Version 25H2
lt 10.0.26200.0..10.0.26200.9445 - Microsoft Windows 11 version 26H1
lt 10.0.28000.0..10.0.28000.2954 - Microsoft Windows Server 2016
lt 10.0.14393.0..10.0.14393.9512 - Microsoft Windows Server 2016 (Server Core installation)
lt 10.0.14393.0..10.0.14393.9512 - Microsoft Windows Server 2019
lt 10.0.17763.0..10.0.17763.9245 - Microsoft Windows Server 2019 (Server Core installation)
lt 10.0.17763.0..10.0.17763.9245 - Microsoft Windows Server 2022
lt 10.0.20348.0..10.0.20348.5622 - Microsoft Windows Server 2025
lt 10.0.26100.0..10.0.26100.33438 - Microsoft Windows Server 2025 (Server Core installation)
lt 10.0.26100.0..10.0.26100.33438
- Microsoft Windows 10 Version 1607
- Fixed in
- Microsoft Windows 10 Version 1607
10.0.14393.9512 - Microsoft Windows 10 Version 1809
10.0.17763.9245 - Microsoft Windows 10 Version 21H2
10.0.19044.7725 - Microsoft Windows 10 Version 22H2
10.0.19045.7725 - Microsoft Windows 11 version 23H2
10.0.22631.7582 - Microsoft Windows 11 Version 24H2
10.0.26100.9445 - Microsoft Windows 11 Version 25H2
10.0.26200.9445 - Microsoft Windows 11 version 26H1
10.0.28000.2954 - Microsoft Windows Server 2016
10.0.14393.9512 - Microsoft Windows Server 2016 (Server Core installation)
10.0.14393.9512 - Microsoft Windows Server 2019
10.0.17763.9245 - Microsoft Windows Server 2019 (Server Core installation)
10.0.17763.9245 - Microsoft Windows Server 2022
10.0.20348.5622 - Microsoft Windows Server 2025
10.0.26100.33438 - Microsoft Windows Server 2025 (Server Core installation)
10.0.26100.33438
- Microsoft Windows 10 Version 1607
Not sure whether and how you are affected? Ask a question about this vulnerability
Metrics
7.0
Priority
XIEM Effective CVSS: highest available CVSS rating from NVD and vendor data.
Source: NVD, CVSS v3
7.0
CVSS v3
Severity High on the scale from 0 to 10.
Source: BSI
2.8 %
EPSS score
Moderate — model estimates 1-10% exploitation likelihood.
Source: FIRST EPSS, percentile 86.5
Show all metrics
- Severity
- High
Priority (0–325)
The priority score is a consolidated metric that condenses several individual signals into a single, action-guiding ranking: technical severity (CVSS), exploitation likelihood (EPSS), known-exploited status (KEV) and the context of the affected asset. The aim is to answer the only truly important question in vulnerability management: what first?
Read in glossary- 76.76 Methodology
Exploit maturity
An exploit is code or a technique that specifically uses a concrete vulnerability to force unintended behaviour — such as executing code or escalating privileges. It is the tool that turns a theoretical flaw into a practical attack.
Read in glossary- no public PoC known
XIEM Effective CVSS
XIEM® is the tiered managed-security operating model from NEOSEC and a registered trademark of NEOSEC GmbH. It extends classic SIEM — the central collection, normalisation and correlation of security-relevant events — with endpoint forensics, network visibility and deception technology, and consolidates them into three building tiers: Sentry, Orchestrate and Command.
Read in glossary- 7.0 Methodology
CVSS v3
CVSS is the globally established, open standard for assessing the technical severity of a vulnerability on a scale from 0 to 10. It describes how easily a flaw can be exploited and what damage it can cause — but not how likely its actual exploitation is. CVSS and the complementary EPSS deliberately answer different questions.
Read in glossary- 7.0
EPSS score
The EPSS score is the absolute model output for an individual vulnerability: the estimated probability of real-world exploitation within the next 30 days, expressed as a value between 0 and 1 (i.e. 0 % to 100 %). A score of 0.42 means „the model estimates a 42 % chance of real-world exploitation within 30 days“.
Read in glossary- 2.8 %
- Moderate — model estimates 1-10% exploitation likelihood.
EPSS percentile
The EPSS percentile is the relative position of a vulnerability within all EPSS-scored CVEs, expressed as a value between 0 and 1. A percentile of 0.90 means „this CVE has a higher EPSS score than 90 % of all other scored CVEs“. Unlike the EPSS score, it is not a probability — but a positioning within a ranking.
Read in glossary- 86.5
- Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
KEV status
The KEV catalogue is a list maintained by the US authority CISA of vulnerabilities for which active exploitation in the wild has been confirmed. It answers not the question „how severe?“ but „is it already being attacked?“ — thereby sharply prioritising patching.
Read in glossary- —
- Published
- CISA assessment (SSVC)
- Exploitation: none known · not automatable · Technical impact: total
- Source: CISA Vulnrichment, as of 10 September 2026
CWE
CWE is a catalogue of typical weakness types in software and hardware — such as flawed input validation, unsafe memory handling or poor authentication. Where a CVE names a concrete vulnerability in a concrete product, a CWE describes the underlying class of defect.
Read in glossary- CWE-502
Detection rules
No NEOSEC detection rule is available for this vulnerability yet.
Classification under NIS2 and CRA
Rule-based classification from exploitation status and severity. It does not replace a case-by-case assessment.
NIS2
NIS2 is EU Directive (EU) 2022/2555 to raise the level of cybersecurity across the Union. It substantially broadens obligations compared with the first NIS directive: more sectors, mandatory risk management, staged reporting duties and personal accountability of senior management.
Read in glossary- High technical severity: assess and remediate the vulnerability in vulnerability handling under Art. 21(2)(e) NIS2 and document the decision.
CRA
The CRA is EU Regulation (EU) 2024/2847 setting horizontal cybersecurity requirements for „products with digital elements“ — from industrial controllers and software to connected consumer devices. For the first time manufacturers must ensure security across the entire product lifecycle, handle vulnerabilities and provide security updates.
Read in glossary- From 11.12.2027, Annex I Part II CRA requires manufacturers of affected products with digital elements to handle vulnerabilities without delay and provide security updates.
ISO/IEC 27001
ISO/IEC 27001 is the internationally leading standard for an information security management system (ISMS). It describes a risk-based, process-oriented framework to systematically plan, implement, review and improve information security.
Read in glossary- Control A.8.8, management of technical vulnerabilities: assess relevance to your systems, plan remediation and keep evidence.
Description
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
Source: BSI WID Portal
Affected products
The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.
| Affected versions | Fixed in | ||
|---|---|---|---|
| Microsoft | HEIF Image Extension |
|
|
| Microsoft | HEVC Video Extensions |
|
|
| Microsoft | HEVC Video Extensions for Licensed Applications |
|
|
| Microsoft | HEVC Video Extensions from Device Manufacturer |
|
|
| Microsoft | Microsoft 365 Apps for Enterprise |
|
|
| Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 |
|
|
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 14 |
|
|
| Microsoft | Microsoft Exchange Server 2019 Cumulative Update 15 |
|
|
| Microsoft | Microsoft Exchange Server Subscription Edition RTM |
|
|
| Microsoft | Microsoft Office 2016 |
|
|
| Microsoft | Microsoft Office 2019 |
|
|
| Microsoft | Microsoft Office 365 for Mac |
|
|
| Microsoft | Microsoft Office for Android |
|
|
| Microsoft | Microsoft Office LTSC 2021 |
|
|
| Microsoft | Microsoft Office LTSC 2024 |
|
|
| Microsoft | Microsoft Office LTSC for Mac 2021 |
|
|
| Microsoft | Microsoft Office LTSC for Mac 2024 |
|
|
| Microsoft | Raw Image Extension |
|
|
| Microsoft | Remote Desktop client for Windows Desktop |
|
|
| Microsoft | SQL Server Management Studio 22 |
|
|
| Microsoft | Web Media Extensions |
|
|
| Microsoft | WebP Image Extension |
|
|
| Microsoft | Windows 10 Version 1607 |
|
|
| Microsoft | Windows 10 Version 1809 |
|
|
| Microsoft | Windows 10 Version 21H2 |
|
|
| Microsoft | Windows 10 Version 22H2 |
|
|
| Microsoft | Windows 11 version 23H2 |
|
|
| Microsoft | Windows 11 Version 24H2 |
|
|
| Microsoft | Windows 11 Version 25H2 |
|
|
| Microsoft | Windows 11 version 26H1 |
|
|
| Microsoft | Windows Server 2012 |
|
|
| Microsoft | Windows Server 2012 (Server Core installation) |
|
|
| Microsoft | Windows Server 2012 R2 |
|
|
| Microsoft | Windows Server 2012 R2 (Server Core installation) |
|
|
| Microsoft | Windows Server 2016 |
|
|
| Microsoft | Windows Server 2016 (Server Core installation) |
|
|
| Microsoft | Windows Server 2019 |
|
|
| Microsoft | Windows Server 2019 (Server Core installation) |
|
|
| Microsoft | Windows Server 2022 |
|
|
| Microsoft | Windows Server 2025 |
|
|
| Microsoft | Windows Server 2025 (Server Core installation) |
|
|
| microsoft | exchange_server |
|
|
From bundled advisories, not CVE-specific (18)
Product list of a bundled advisory that does not state which product this CVE affects.
| Affected versions | Fixed in | ||
|---|---|---|---|
| Microsoft | Access |
|
|
| Microsoft | Excel |
|
|
| Microsoft | Office |
|
|
| Microsoft | Office 365 |
|
|
| Microsoft | Outlook |
|
|
| Microsoft | PowerPoint |
|
|
| Microsoft | SharePoint |
|
|
| Microsoft | Skype |
|
|
| Microsoft | Teams |
|
|
| Microsoft | Word |
|
|
Vendors and products
- Microsoft Microsoft Windows 10 1607
- Microsoft Microsoft Windows 10 1809
- Microsoft Microsoft Windows 10 21H2
- Microsoft Microsoft Windows 10 22h2
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21h2
- Microsoft Windows 10 Version 22h2
- Microsoft Microsoft Windows 11 23H2
- Microsoft Microsoft Windows 11 24H2
- Microsoft Microsoft Windows 11 25H2
- Microsoft Microsoft Windows 11 26H1
Affected operating systems
| Windows | microsoft | windows_10_1607 | — |
| Windows | microsoft | windows_10_1809 | — |
| Windows | microsoft | windows_10_21h2 | — |
| Windows | microsoft | windows_10_22h2 | — |
| Windows | microsoft | windows_11_23h2 | — |
| Windows | microsoft | windows_11_24h2 | — |
| Windows | microsoft | windows_11_25h2 | — |
| Windows | microsoft | windows_11_26h1 | — |
| Windows | microsoft | windows_server_2012 | — |
| Windows | microsoft | windows_server_2012 | r2 |
| Windows | microsoft | windows_server_2016 | — |
| Windows | microsoft | windows_server_2019 | — |
| Windows | microsoft | windows_server_2022 | — |
| Windows | microsoft | windows_server_2025 | — |
Weakness classes (CWE)
CWE-502Deserialization of Untrusted Data
Base
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Entry at MITRE CWE-502
References & sources
- Microsoft Security Update GuideWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Kernel Information Disclosure VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Kernel Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Remote Access Connection Manager Remote Code Execution VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Performance Monitor Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows File History Service Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Encrypting File System (EFS) Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Imaging Component Remote Code Execution VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Biometric Service Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideRemote Desktop Gateway Service Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideMicrosoft Windows Media Foundation Remote Code Execution VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Deployment Services Remote Code Execution VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Fast FAT Driver Remote Code Execution VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows TCP/IP Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideMicrosoft Exchange Server Denial of Service VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows NTFS Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideMicrosoft OpenSSH for Windows Remote Code Execution VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Biometric Service Elevation of Privilege VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Compressed Folder Remote Code Execution VulnerabilityVendor advisory, Patch
- Microsoft Security Update GuideWindows Management Instrumentation Information Disclosure VulnerabilityVendor advisory, Patch
Changes to this CVE
Who changed this CVE and when: NVD (analysis, affected products, CVSS), the CVE publisher (CNA) and additional providers such as CISA (ADP).
Initial analysis by NVDNVD
Newly listed as affected:- Microsoft Windows 10 1607 (before 10.0.14393.9512)
- Microsoft Windows 10 1809 (before 10.0.17763.9245)
- Microsoft Windows 10 21H2 (before 10.0.19044.7725)
- Microsoft Windows 10 22h2 (before 10.0.19045.7725)
- Microsoft Windows 11 23H2 (before 10.0.22631.7582)
- Microsoft Windows 11 24H2 (before 10.0.26100.9445)
- Microsoft Windows 11 25H2 (before 10.0.26200.9445)
- Microsoft Windows 11 26H1 (before 10.0.28000.2954)
- Microsoft Windows Server 2025 (before 10.0.26100.33438)
- Microsoft Windows Server 2016 (before 10.0.14393.9512)
- Microsoft Windows Server 2019 (before 10.0.17763.9245)
- Microsoft Windows Server 2022 (before 10.0.20348.5622)
Show 2 original changes
Individual changes of this event as published by NVD Type Action Before After Product configuration added —OR *cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.14393.9512 *cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.14393.9512 *cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.17763.9245 *cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.17763.9245 *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.19044.7725 *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.19044.7725 *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.19044.7725 *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.19045.7725 *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.19045.7725 *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.19045.7725 *cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.22631.7582 *cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.22631.7582 *cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.26100.9445 *cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.26100.9445 *cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.26200.9445 *cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.26200.9445 *cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.28000.2954 *cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.28000.2954 *cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.26100.33438 *cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.14393.9512 *cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.17763.9245 *cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.20348.5622Reference type added —Microsoft Corporation: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69694 Types: Patch, Vendor AdvisorySource identifier: nvd@nist.gov
Record modifiedCISA ADP
CISA assessment (SSVC): exploitation: none known, automatable: no
Show the original change
Individual changes of this event as published by NVD Type Action Before After SSVC assessment added —{"id":"CVE-2026-69694","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"version":"2.0.3","timestamp":"2026-09-10T14:15:58.054393Z"}Source identifier: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ReceivedMicrosoft
CVSS V3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness type: CWE-502
Description added or changed
Show 5 original changes
Individual changes of this event as published by NVD Type Action Before After Description added —Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.CVSS added —AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness type (CWE) added —CWE-502Affected versions (publisher) added —New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/69xxx/CVE-2026-69694.json">CVE-2026-69694</a>Reference added —https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69694Source identifier: secure@microsoft.com
Linked CVEs
| Critical | CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.8 | Actively exploited |
| High | CVE-2026-85877 | Windows Print Spooler Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-85360 | Windows Kernel Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-84001 | Windows Key Distribution Center Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-84000 | Microsoft Graphics Component Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-83999 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-83998 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-83997 | Windows Message Queuing Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-83996 | Windows Error Reporting Elevation of Privilege Vulnerability | 8.8 | — |
| High | CVE-2026-83995 | Windows NTFS Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83992 | Windows Imaging Component Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-83991 | Windows Cloud Files Mini Filter Driver Tampering Vulnerability | 5.5 | — |
| High | CVE-2026-83990 | Microsoft Graphics Component Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83989 | Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-83988 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83987 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83986 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83985 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83983 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83982 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83981 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83980 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83979 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83978 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
Show 711 more CVEs
| High | CVE-2026-83977 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83976 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83975 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83974 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83973 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83972 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83971 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83970 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83969 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83968 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83967 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83955 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83954 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83952 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83942 | Windows Kernel Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-83940 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-83939 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | 8.2 | — |
| Medium | CVE-2026-83501 | Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-83498 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | 7.8 | — |
| Critical | CVE-2026-81963 | Windows Update Stack Elevation of Privilege Vulnerability | 7.8 | Actively exploited |
| High | CVE-2026-81955 | Windows Graphics Component Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-81355 | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-81354 | Windows Hello Elevation of Privilege Vulnerability | 8.2 | — |
| High | CVE-2026-81353 | HEIF Image Extensions Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-81352 | Web Media Extensions Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-80096 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | 8.8 | — |
| High | CVE-2026-80093 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-80083 | Windows Hyper-V Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-80077 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-80075 | Windows Work Folders Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-80074 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-78523 | Windows DNS Server Denial of Service Vulnerability | 7.5 | — |
| Medium | CVE-2026-78516 | Windows Storage Information Disclosure Vulnerability | 4.3 | — |
| Medium | CVE-2026-78508 | Windows CD-ROM Driver Information Disclosure Vulnerability | 4.6 | — |
| High | CVE-2026-78464 | Windows MIDI Service Module Elevation of Privileges Vulnerability | 7.0 | — |
| High | CVE-2026-78463 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-78457 | Windows Security Health Service Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-78455 | Xbox Information Disclosure Vulnerability | 4.3 | — |
| Medium | CVE-2026-78454 | Windows CD-ROM Driver Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-78453 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | 6.5 | — |
| Medium | CVE-2026-78452 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | 4.6 | — |
| Medium | CVE-2026-78451 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | 6.8 | — |
| High | CVE-2026-78450 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-78449 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-78448 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-78447 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-78446 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | 7.5 | — |
| Critical | CVE-2026-78445 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-78444 | Microsoft Failover Cluster Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-77905 | Windows Management Instrumentation Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-77904 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-77899 | Windows Security Center Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-77896 | Windows Remote Desktop Client Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77895 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77894 | Windows Installer Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-77893 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| Medium | CVE-2026-77892 | Windows Boot Manager Elevation of Privilege Vulnerability | 6.8 | — |
| Medium | CVE-2026-77891 | Windows DHCP Server Remote Code Execution Vulnerability | 6.4 | — |
| High | CVE-2026-77890 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77889 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77888 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| Medium | CVE-2026-77887 | Windows DHCP Server Remote Code Execution Vulnerability | 6.4 | — |
| High | CVE-2026-77886 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77505 | Windows DNS Server Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-77504 | Microsoft Office Word Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-77503 | Windows NTFS Elevation of Privilege Vulnerability | 8.4 | — |
| High | CVE-2026-77502 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77501 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77500 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-77499 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77498 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-77495 | Windows Imaging Component Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-77494 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| Critical | CVE-2026-77493 | Windows Graphics Component Remote Code Execution Vulnerability | 9.8 | — |
| Medium | CVE-2026-77492 | Windows Storage Port Driver Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-77491 | Windows GDI Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-77489 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-73026 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| Critical | CVE-2026-73025 | Windows iSCSI Security Feature Bypass Vulnerability | 9.8 | — |
| High | CVE-2026-73024 | Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-73023 | Windows Imaging Component Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-73022 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-73021 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-73020 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-73019 | Windows URL Moniker Security Feature Bypass Vulnerability | 4.3 | — |
| High | CVE-2026-73018 | Graphic Fonts Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-73017 | Graphics Kernel Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-73016 | DirectWrite Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-73015 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-73014 | Data Sharing Service Client Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-73013 | Windows Imaging Component Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-73012 | Windows Management Services Elevation of Privilege Vulnerability | 8.8 | — |
| High | CVE-2026-73011 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| Critical | CVE-2026-73010 | Microsoft Failover Cluster Remote Code Execution Vulnerability | 9.8 | — |
| Critical | CVE-2026-73009 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 9.8 | — |
| Medium | CVE-2026-73008 | Windows Biometric Service Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-73007 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-73006 | DirectWrite Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-73005 | Windows Authentication Methods Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-73004 | Windows Autopilot Tampering Vulnerability | 5.5 | — |
| High | CVE-2026-73003 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-73002 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-73001 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-73000 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-72999 | Windows USB Hub Driver Elevation of Privilege Vulnerability | 6.8 | — |
| High | CVE-2026-72997 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72996 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72995 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72994 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72993 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72992 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72991 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72990 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72989 | Windows Failover Cluster Information Disclosure Vulnerability | 7.5 | — |
| High | CVE-2026-72988 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72987 | Windows DNS Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-72986 | Graphic Fonts Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-72985 | Volume Shadow Copy Elevation of Privilege Vulnerability | 6.8 | — |
| Critical | CVE-2026-72983 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | 9.8 | — |
| Critical | CVE-2026-72982 | Windows Netlogon Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-72981 | IP Helper Remote Code Execution Vulnerability | 8.1 | — |
| Medium | CVE-2026-72980 | Windows Hello Security Feature Bypass Vulnerability | 5.5 | — |
| Critical | CVE-2026-72979 | Windows DHCP Server Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-72978 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-72967 | Windows Network Connection Broker Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-72966 | Windows Remote Access Connection Manager Tampering Vulnerability | 5.5 | — |
| High | CVE-2026-72965 | Windows WebClient Service Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-72964 | Windows Internet Connection Sharing (ICS) Tampering Vulnerability | 5.5 | — |
| High | CVE-2026-72963 | Windows Modern Execution Server Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-72962 | Windows USB Video Driver Elevation of Privilege Vulnerability | 8.2 | — |
| High | CVE-2026-72961 | Windows Hyper-V Elevation of Privilege Vulnerability | 8.2 | — |
| High | CVE-2026-72960 | Windows Media Player Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-72959 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-72958 | Windows Credential Guard Elevation of Privilege Vulnerability | 8.2 | — |
| High | CVE-2026-72957 | Windows Deployment Services Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-72954 | Windows Deployment Services Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-72953 | Windows USB Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72952 | Windows Spaceport.sys Remote Code Execution Vulnerability | 7.0 | — |
| Critical | CVE-2026-72950 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-72949 | Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-72948 | Windows DNS Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72947 | Windows File History Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-72946 | Microsoft Storage Port Driver Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-72945 | Windows Task Scheduler Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-72944 | Role: Windows Fax Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72943 | Windows Deployment Services Remote Code Execution Vulnerability | 7.5 | — |
| Medium | CVE-2026-72942 | Windows Spaceport.sys Information Disclosure Vulnerability | 6.5 | — |
| High | CVE-2026-72941 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72940 | Windows Schannel Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-72939 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | 6.5 | — |
| Medium | CVE-2026-72937 | Windows Storage Port Driver Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-72936 | Windows SMB Client Remote Code Execution Vulnerability | 8.1 | — |
| Medium | CVE-2026-72935 | Windows NTFS Elevation of Privilege Vulnerability | 6.7 | — |
| High | CVE-2026-72933 | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-72932 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | 7.5 | — |
| Medium | CVE-2026-72931 | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | 5.5 | — |
| High | CVE-2026-72930 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | 7.0 | — |
| High | CVE-2026-72929 | Windows Installer Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72928 | Windows DNS Server Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-72927 | Winsock Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-72926 | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-71353 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-71352 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-71351 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-71350 | Windows Spaceport.sys Remote Code Execution Vulnerability | 6.8 | — |
| Medium | CVE-2026-71349 | Windows Spaceport.sys Remote Code Execution Vulnerability | 6.8 | — |
| Medium | CVE-2026-71348 | Windows Spaceport.sys Remote Code Execution Vulnerability | 6.8 | — |
| High | CVE-2026-71345 | Windows Spaceport.sys Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-71343 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-71342 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-71341 | Windows Partition Management Driver Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-71340 | Windows File History Service Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-71339 | Windows Installer Elevation of Privilege Vulnerability | 6.7 | — |
| Medium | CVE-2026-71338 | Windows Failover Cluster Elevation of Privilege Vulnerability | 6.4 | — |
| High | CVE-2026-71337 | Windows Storage Management Provider Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-71336 | Windows Work Folder Service Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-71334 | Windows NFS Portmapper Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-71333 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-71332 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-71330 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | 7.5 | — |
| Medium | CVE-2026-71329 | Windows NTFS Remote Code Execution Vulnerability | 6.8 | — |
| High | CVE-2026-70587 | Windows Remote Desktop Protocol Information Disclosure Vulnerability | 7.5 | — |
| High | CVE-2026-70586 | Windows Paint Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-70585 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | 7.0 | — |
| High | CVE-2026-70584 | Windows Core Messaging Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-70583 | Windows Core Messaging Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-70582 | Windows Management Instrumentation Elevation of Privilege Vulnerability | 6.4 | — |
| High | CVE-2026-70581 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-70579 | Windows Mobile Broadband Information Disclosure Vulnerability | 7.5 | — |
| High | CVE-2026-70578 | Windows Credential Guard Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-70577 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-70575 | Windows Schannel Denial of Service Vulnerability | 6.5 | — |
| High | CVE-2026-70574 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | 7.8 | — |
| High | CVE-2026-70573 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-70572 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-70570 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-70569 | Windows Spaceport.sys Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-70568 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-70567 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-70565 | Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-70564 | Windows Print Spooler Components Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-70563 | Windows Shell Spoofing Vulnerability | 8.1 | — |
| High | CVE-2026-70562 | Windows Audio Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-70351 | Microsoft WebP Image Extension Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-70342 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 8.1 | — |
| Critical | CVE-2026-70296 | Windows Imaging Component Remote Code Execution Vulnerability | 9.8 | — |
| Medium | CVE-2026-70290 | Win32k Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-70289 | Windows Win32k Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-70283 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-70203 | Windows Media Player Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-70145 | Microsoft Windows Search Component Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-70124 | Windows DHCP Server Information Disclosure Vulnerability | 7.5 | — |
| Medium | CVE-2026-70091 | Windows DNS Denial of Service Vulnerability | 5.9 | — |
| High | CVE-2026-70065 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| Medium | CVE-2026-70019 | Windows Compressed Folder Information Disclosure Vulnerability | 6.5 | — |
| High | CVE-2026-69989 | Windows DNS Server Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69930 | Windows DHCP Server Information Disclosure Vulnerability | 7.5 | — |
| High | CVE-2026-69929 | Windows DHCP Server Information Disclosure Vulnerability | 7.5 | — |
| High | CVE-2026-69921 | Windows Print Spooler Components Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69911 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | 7.0 | — |
| Critical | CVE-2026-69910 | Windows Hyper-V Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69907 | Windows Enterprise App Management Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69906 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | 8.2 | — |
| High | CVE-2026-69900 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69896 | Windows Error Reporting Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69895 | Windows Spaceport.sys Information Disclosure Vulnerability | 4.7 | — |
| High | CVE-2026-69891 | Windows Media Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69890 | Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability | 7.5 | — |
| High | CVE-2026-69889 | Windows Bluetooth Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69881 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 | — |
| Medium | CVE-2026-69878 | Windows DHCP Server Remote Code Execution Vulnerability | 6.4 | — |
| High | CVE-2026-69876 | Windows DHCP Server Remote Code Execution Vulnerability | 8.0 | — |
| High | CVE-2026-69875 | Windows NTFS Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69874 | Windows ALPC Elevation of Privilege Vulnerability | 8.2 | — |
| High | CVE-2026-69866 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69864 | Windows Hello Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69862 | Windows Wireless Wide Area Network Service Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69860 | Windows Imaging Component Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69859 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69858 | Windows DNS Server Remote Code Execution Vulnerability | 8.1 | — |
| Medium | CVE-2026-69853 | Win32k Information Disclosure Vulnerability | 4.7 | — |
| High | CVE-2026-69852 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-69847 | Windows DHCP Server Remote Code Execution Vulnerability | 8.0 | — |
| High | CVE-2026-69846 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | 8.2 | — |
| Critical | CVE-2026-69845 | Windows DHCP Server Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69844 | Windows Win32k Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69841 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69839 | Windows iSCSI Target Service Denial of Service Vulnerability | 6.5 | — |
| High | CVE-2026-69838 | Windows Print Spooler Components Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69834 | Windows ALPC Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69832 | Win32k Information Disclosure Vulnerability | 5.6 | — |
| Critical | CVE-2026-69829 | Windows Shell Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69827 | Windows DNS Server Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69826 | Windows Biometric Service Elevation of Privilege Vulnerability | 8.0 | — |
| Critical | CVE-2026-69824 | Microsoft Standard XPS Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69822 | Windows Kerberos Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69821 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69820 | Windows Hello Elevation of Privilege Vulnerability | 8.2 | — |
| Critical | CVE-2026-69819 | RPC Runtime Library Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69818 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69817 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69816 | Windows Accounts Control Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69814 | Windows Credential Providers Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69813 | Windows DNS Server Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69809 | Windows Active Directory Domain Services Denial of Service Vulnerability | 7.5 | — |
| Medium | CVE-2026-69808 | Win32k Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69807 | PowerShell Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69803 | Windows DHCP Server Information Disclosure Vulnerability | 7.5 | — |
| High | CVE-2026-69801 | Windows Audio Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69799 | Windows Hello Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69794 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69793 | Windows TCP/IP Security Feature Bypass Vulnerability | 7.5 | — |
| Medium | CVE-2026-69792 | Windows Win32K Security Feature Bypass Vulnerability | 4.7 | — |
| High | CVE-2026-69791 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69790 | Windows Credential Providers Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69787 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69786 | Windows Text Shaping Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69785 | Windows Smart Card Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69784 | Windows Hello Elevation of Privilege Vulnerability | 8.8 | — |
| High | CVE-2026-69782 | Windows DNS Server Remote Code Execution Vulnerability | 8.1 | — |
| Medium | CVE-2026-69781 | Windows DHCP Client Denial of Service Vulnerability | 6.5 | — |
| High | CVE-2026-69779 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69777 | Windows DHCP Client Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69775 | Windows DWM Core Library Elevation of Privilege Vulnerability | 7.5 | — |
| High | CVE-2026-69773 | Windows Biometric Service Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69772 | Windows Network File System Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-69771 | Windows Container Manager Service Security Feature Bypass Vulnerability | 4.7 | — |
| Medium | CVE-2026-69770 | Windows Spaceport.sys Information Disclosure Vulnerability | 5.5 | — |
| Critical | CVE-2026-69769 | Windows HTTP Print Provider Remote Code Execution Vulnerability | 9.8 | — |
| Critical | CVE-2026-69768 | Windows RNDIS Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69762 | Windows Win32k Elevation of Privilege Vulnerability | 8.8 | — |
| High | CVE-2026-69761 | Windows TCP/IP Elevation of Privilege Vulnerability | 7.5 | — |
| High | CVE-2026-69760 | Windows Kerberos Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-69758 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69757 | Windows TCP/IP Elevation of Privilege Vulnerability | 7.5 | — |
| High | CVE-2026-69744 | Windows Kerberos Denial of Service Vulnerability | 7.5 | — |
| Medium | CVE-2026-69741 | Windows Spaceport.sys Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69740 | Windows Hello Elevation of Privilege Vulnerability | 8.8 | — |
| High | CVE-2026-69738 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69735 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69732 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69731 | HID Class Driver Elevation of Privilege Vulnerability | 7.8 | — |
| Critical | CVE-2026-69730 | Windows DNS Server Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69729 | Windows Credential Providers Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69727 | Windows Biometric Service Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69725 | Windows Hello Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69723 | Windows Kernel Information Disclosure Vulnerability | 5.7 | — |
| High | CVE-2026-69720 | Windows MIDI Service Module Elevation of Privileges Vulnerability | 7.8 | — |
| High | CVE-2026-69717 | Windows Group Policy Elevation of Privilege Vulnerability | 8.8 | — |
| Critical | CVE-2026-69715 | Windows Direct Show Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69714 | Windows Device Association Service Elevation of Privilege Vulnerability | 8.8 | — |
| Medium | CVE-2026-69713 | Windows Secure Boot Security Feature Bypass Vulnerability | 4.4 | — |
| High | CVE-2026-69712 | Windows Key Distribution Center Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69711 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69710 | Windows Hello Elevation of Privilege Vulnerability | 7.5 | — |
| High | CVE-2026-69709 | Windows NTFS Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-69708 | Windows Web Platform Storage Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69707 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69706 | Windows Win32k Elevation of Privilege Vulnerability | 7.5 | — |
| High | CVE-2026-69694 | Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69693 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69692 | Windows Audio Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69691 | Windows Spaceport.sys Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69689 | Windows Win32k Elevation of Privilege Vulnerability | 8.8 | — |
| High | CVE-2026-69688 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | 7.5 | — |
| High | CVE-2026-69687 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69685 | Windows Kerberos Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69684 | Windows Error Reporting Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69682 | Windows Host Guardian Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69681 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | 8.8 | — |
| High | CVE-2026-69680 | Windows DNS Spoofing Vulnerability | 8.1 | — |
| Medium | CVE-2026-69679 | Windows DHCP Server Denial of Service Vulnerability | 5.7 | — |
| High | CVE-2026-69676 | Windows Kerberos Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-69674 | Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability | 5.5 | — |
| Medium | CVE-2026-69672 | Windows DNS Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69669 | Windows Kernel Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69654 | Windows Accounts Control Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69652 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69649 | Raw Image Extension Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69648 | Windows Notification Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69645 | Windows Message Queuing Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69643 | Windows Spaceport.sys Elevation of Privilege Vulnerability | 8.0 | — |
| Critical | CVE-2026-69641 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 9.1 | — |
| High | CVE-2026-69638 | Windows NTFS Remote Code Execution Vulnerability | 8.4 | — |
| Medium | CVE-2026-69637 | Windows DHCP Server Denial of Service Vulnerability | 5.7 | — |
| High | CVE-2026-69631 | Windows DNS Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-69630 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69628 | Windows iSCSI Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-69627 | Windows Remote Desktop Licensing Service Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69625 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | 8.8 | — |
| Medium | CVE-2026-69624 | Active Directory Certificate Services (AD CS) Tampering Vulnerability | 6.5 | — |
| High | CVE-2026-69623 | Windows HTTP Print Provider Remote Code Execution Vulnerability | 8.0 | — |
| High | CVE-2026-69621 | Role: Windows Fax Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69620 | Windows DHCP Server Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69619 | Windows exFAT File System Elevation of Privilege Vulnerability | 8.8 | — |
| Medium | CVE-2026-69618 | Windows SMB Client Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69617 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69616 | Windows Remote Desktop Services Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69613 | Windows Image Acquisition Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69612 | Windows Error Reporting Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69611 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | 7.0 | — |
| High | CVE-2026-69610 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69609 | Win32k Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69608 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69607 | Windows Deployment Services Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-69606 | Windows Shell Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69605 | Microsoft Install Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69604 | Windows Audio Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69603 | Windows Hyper-V Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69602 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | 7.5 | — |
| High | CVE-2026-69601 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69600 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69599 | Remote Desktop Services Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-69598 | Windows iSCSI Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69597 | Windows HTTP.sys Elevation of Privilege Vulnerability | 7.5 | — |
| Critical | CVE-2026-69595 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69594 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69593 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69592 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69591 | Windows NTFS Information Disclosure Vulnerability | 5.7 | — |
| Critical | CVE-2026-69590 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69589 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69588 | Windows TCP/IP Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-69587 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 | — |
| Critical | CVE-2026-69586 | Microsoft Windows PDF Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69585 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69584 | Windows USB Video Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69583 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69582 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69581 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69580 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| Critical | CVE-2026-69579 | Windows Message Queuing Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69578 | Windows Kernel Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69576 | Graphic Fonts Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69575 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69574 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69573 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69572 | Windows SMB Client Information Disclosure Vulnerability | 5.7 | — |
| High | CVE-2026-69571 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69569 | Windows Print Spooler Components Denial of Service Vulnerability | 5.7 | — |
| Medium | CVE-2026-69568 | Storage Spaces Controller Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69567 | Windows NTFS Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69566 | Windows NTFS Remote Code Execution Vulnerability | 6.8 | — |
| High | CVE-2026-69564 | Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69563 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69561 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69560 | Windows Work Folder Service Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69554 | Microsoft Windows Search Component Tampering Vulnerability | 5.5 | — |
| High | CVE-2026-69553 | Windows Hyper-V Elevation of Privilege Vulnerability | 7.5 | — |
| Medium | CVE-2026-69552 | Windows Print Spooler Components Information Disclosure Vulnerability | 5.7 | — |
| High | CVE-2026-69551 | Windows DNS Server Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69549 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | 7.0 | — |
| Medium | CVE-2026-69548 | Windows RNDIS Information Disclosure Vulnerability | 4.6 | — |
| High | CVE-2026-69547 | Windows DHCP Server Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69546 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69544 | Windows SMB Client Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69542 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69541 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | 7.8 | — |
| High | CVE-2026-69540 | Windows Audio Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69539 | Remote Desktop Services Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-69538 | Windows Spaceport.sys Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-69536 | Remote Desktop Services Remote Code Execution Vulnerability | 7.1 | — |
| High | CVE-2026-69535 | Windows Spaceport.sys Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69534 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69532 | Windows NTFS Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69531 | Microsoft Windows Speech Tampering Vulnerability | 5.5 | — |
| High | CVE-2026-69530 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69528 | Windows Shell Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69527 | Windows USB Mass Storage Class Driver Information Disclosure Vulnerability | 5.5 | — |
| Critical | CVE-2026-69525 | Remote Desktop Services Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69524 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69518 | Windows Remote Desktop Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69517 | Windows Wireless Networking Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69516 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69514 | Remote Desktop Services Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-69513 | Windows Error Reporting Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69512 | Windows Spaceport.sys Elevation of Privilege Vulnerability | 8.8 | — |
| High | CVE-2026-69511 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69510 | Windows DHCP Server Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69509 | Role: Windows Fax Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69508 | Windows MIDI Service Module Elevation of Privileges Vulnerability | 7.8 | — |
| Medium | CVE-2026-69507 | Microsoft Windows Search Component Information Disclosure Vulnerability | 5.7 | — |
| High | CVE-2026-69505 | Windows NTFS Elevation of Privilege Vulnerability | 8.0 | — |
| Medium | CVE-2026-69504 | Windows NTFS Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69503 | Windows USB Driver Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69501 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69500 | Windows Image Acquisition Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69499 | Windows Imaging Component Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69498 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69497 | Windows DHCP Server Denial of Service Vulnerability | 6.5 | — |
| Critical | CVE-2026-69496 | Windows Compressed Folder Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69495 | Windows Event Logging Service Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69494 | Windows Event Logging Service Remote Code Execution Vulnerability | 8.8 | — |
| Critical | CVE-2026-69493 | Windows Event Logging Service Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69492 | Windows Partition Management Driver Elevation of Privilege Vulnerability | 7.0 | — |
| Critical | CVE-2026-69491 | Microsoft DirectMusic Remote Code Execution Vulnerability | 9.8 | — |
| Medium | CVE-2026-69490 | Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability | 6.8 | — |
| High | CVE-2026-69489 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69488 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69485 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-69483 | Windows Image Acquisition Information Disclosure Vulnerability | 4.7 | — |
| High | CVE-2026-69482 | Windows Error Reporting Tampering Vulnerability | 7.1 | — |
| High | CVE-2026-69481 | Windows Enterprise App Management Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69480 | Windows Partition Management Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69479 | Windows NTFS Remote Code Execution Vulnerability | 8.4 | — |
| High | CVE-2026-69478 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69476 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69475 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69474 | Windows Overlay Filter Information Disclosure Vulnerability | 4.8 | — |
| High | CVE-2026-69473 | Windows Kernel Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69472 | Windows Devices Human Interface Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69470 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69469 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | 6.6 | — |
| High | CVE-2026-69468 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69467 | Microsoft Graphics Component Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69466 | Windows Kernel Elevation of Privilege Vulnerability | 7.0 | — |
| Critical | CVE-2026-69463 | Windows NTFS Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69462 | Windows Error Reporting Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69461 | Windows NTFS Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69460 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69459 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69458 | Windows BitLocker Elevation of Privilege Vulnerability | 8.0 | — |
| Medium | CVE-2026-69457 | Windows USB Driver Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69456 | Microsoft Windows Speech Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69455 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69453 | Microsoft Windows Search Component Tampering Vulnerability | 5.5 | — |
| High | CVE-2026-69451 | Windows Management Instrumentation Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69450 | Windows Error Reporting Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69449 | Windows BitLocker Remote Code Execution Vulnerability | 6.7 | — |
| High | CVE-2026-69448 | Windows Bluetooth Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69447 | Windows Audio Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69445 | Windows Compressed Folder Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69444 | Microsoft Windows Speech Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69443 | Windows Device Health Attestation (DHA) Information Disclosure Vulnerability | 7.5 | — |
| High | CVE-2026-69441 | Windows Installer Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69440 | Windows MIDI Service Module Elevation of Privileges Vulnerability | 7.0 | — |
| High | CVE-2026-69438 | Microsoft JScript Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69436 | Windows State Repository Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69434 | Windows URL Moniker Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69433 | Windows Error Reporting Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69432 | Volume Manager Driver Elevation of Privilege Vulnerability | 7.8 | — |
| Critical | CVE-2026-69431 | Telnet Client Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69430 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69429 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-69428 | Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-69427 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69426 | Windows VOLSNAP.SYS Remote Code Execution Vulnerability | 7.8 | — |
| Medium | CVE-2026-69425 | Windows NTFS Tampering Vulnerability | 4.7 | — |
| High | CVE-2026-69424 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69423 | Windows USB Video Driver Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69422 | Windows USB Video Driver Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69421 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69420 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69418 | Volume Manager Driver Elevation of Privilege Vulnerability | 8.0 | — |
| Medium | CVE-2026-69416 | Windows DHCP Server Denial of Service Vulnerability | 5.7 | — |
| Medium | CVE-2026-69415 | Windows DHCP Server Elevation of Privilege Vulnerability | 6.8 | — |
| High | CVE-2026-69413 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69412 | Windows DHCP Server Remote Code Execution Vulnerability | 8.0 | — |
| High | CVE-2026-69410 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| Critical | CVE-2026-69408 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69407 | Volume Manager Driver Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69406 | Windows Kernel Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-69405 | Windows DHCP Server Denial of Service Vulnerability | 5.7 | — |
| High | CVE-2026-69404 | Windows TCP/IP Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69403 | Windows SMB Server Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69401 | Audio Video Control Transport Protocol Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69398 | Windows Bluetooth Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69397 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-69396 | Windows NDIS Elevation of Privilege Vulnerability | 7.1 | — |
| Medium | CVE-2026-69395 | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability | 6.5 | — |
| High | CVE-2026-69394 | Windows Audio Service Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69393 | Windows Spaceport.sys Information Disclosure Vulnerability | 5.7 | — |
| High | CVE-2026-69392 | Windows Shell Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69391 | Windows Broker Infrastructure Service Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69390 | Windows Spaceport.sys Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69389 | Windows Storage Management Provider Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69388 | Windows Bluetooth Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69386 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69385 | Windows TCP/IP Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69384 | Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability | 7.1 | — |
| High | CVE-2026-69383 | Windows Shell Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69382 | Microsoft Exchange Server Information Disclosure Vulnerability | 5.9 | — |
| Medium | CVE-2026-69381 | Windows Storage Port Driver Information Disclosure Vulnerability | 4.6 | — |
| High | CVE-2026-69380 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.1 | — |
| High | CVE-2026-69379 | Windows NTFS Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69378 | Microsoft Exchange Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-69377 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69376 | Microsoft Standard XPS Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-69375 | Microsoft Exchange Server Tampering Vulnerability | 6.5 | — |
| Medium | CVE-2026-69374 | Windows SMB Server Denial of Service Vulnerability | 6.5 | — |
| Medium | CVE-2026-69373 | Windows Overlay Filter Elevation of Privilege Vulnerability | 6.7 | — |
| Medium | CVE-2026-69372 | Windows Network File System Denial of Service Vulnerability | 5.7 | — |
| High | CVE-2026-69371 | Windows Overlay Filter Elevation of Privilege Vulnerability | 8.0 | — |
| Medium | CVE-2026-69369 | Windows DNS Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69368 | Windows Overlay Filter Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69367 | Microsoft Standard XPS Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69366 | Windows Kernel Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69365 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69364 | Windows Print Spooler Components Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69362 | Windows Error Reporting Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69361 | Microsoft Exchange Server Spoofing Vulnerability | 6.5 | — |
| High | CVE-2026-69360 | Microsoft Office Word Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69359 | Active Directory Domain Services Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69358 | Remote Desktop Client Remote Code Execution Vulnerability | 7.1 | — |
| High | CVE-2026-69357 | Windows NDIS Elevation of Privilege Vulnerability | 7.1 | — |
| Critical | CVE-2026-69356 | Microsoft Exchange Server Spoofing Vulnerability | 9.3 | — |
| High | CVE-2026-69355 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.8 | — |
| Medium | CVE-2026-69353 | Windows Text Shaping Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69352 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69351 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-69350 | Windows Overlay Filter Elevation of Privilege Vulnerability | 6.7 | — |
| Medium | CVE-2026-69349 | Windows Management Instrumentation Information Disclosure Vulnerability | 5.7 | — |
| High | CVE-2026-69348 | Windows Win32k Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69347 | Windows Fast FAT Driver Remote Code Execution Vulnerability | 7.4 | — |
| High | CVE-2026-69346 | Windows Print Spooler Components Elevation of Privilege Vulnerability | 8.0 | — |
| Medium | CVE-2026-69345 | Microsoft Standard XPS Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-69344 | Windows Print Spooler Components Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-69343 | Windows Overlay Filter Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69342 | Windows DHCP Server Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-69341 | Windows Image Acquisition Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69340 | Windows NTFS Elevation of Privilege Vulnerability | 7.1 | — |
| Medium | CVE-2026-69339 | Windows MIDI Service Module Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69338 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69337 | Windows Registry Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69336 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69335 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69334 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69333 | Windows Win32k Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69332 | Windows NTFS Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69331 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69329 | BranchCache Denial of Service Vulnerability | 7.5 | — |
| High | CVE-2026-69328 | Windows Storage Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69325 | Microsoft JScript Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-69324 | Windows Performance Monitor Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69323 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69322 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | 8.0 | — |
| Medium | CVE-2026-69321 | Windows Power Dependency Coordinator Tampering Vulnerability | 5.5 | — |
| High | CVE-2026-69319 | Windows USB Video Driver Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69318 | Windows Imaging Component Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-69317 | Windows Remote Desktop Client Information Disclosure Vulnerability | 5.7 | — |
| Medium | CVE-2026-69316 | Windows Overlay Filter Information Disclosure Vulnerability | 4.7 | — |
| Medium | CVE-2026-69315 | Windows License Manager Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69314 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69313 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69312 | Windows NTFS Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69311 | Windows Audio Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69310 | Windows DNS Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69309 | Windows Print Spooler Components Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69308 | Microsoft Standard XPS Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69307 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69305 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | 7.1 | — |
| Medium | CVE-2026-69303 | Push Message Routing Service Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69301 | Windows Win32k Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69300 | Windows Push Notifications Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69299 | Microsoft COM for Windows Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69298 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69297 | Windows DHCP Server Information Disclosure Vulnerability | 6.5 | — |
| High | CVE-2026-69296 | Windows Device Association Service Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69295 | Windows USB Driver Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69294 | Microsoft COM for Windows Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69293 | Windows Biometric Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69292 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69291 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69290 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69289 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69288 | Windows GDI+ Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69287 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-69286 | Windows USB Audio Class Driver Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-69284 | Windows DCOM Server Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69283 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69281 | Windows License Manager Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69280 | Windows Push Notifications Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69279 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69277 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | 7.8 | — |
| Critical | CVE-2026-69276 | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-69275 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-69274 | Windows Win32k Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69272 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-69271 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-69270 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-69269 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-69267 | Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability | 6.5 | — |
| High | CVE-2026-69266 | Windows DHCP Server Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-69265 | Windows NTFS Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-68898 | Windows iSCSI Denial of Service Vulnerability | 6.5 | — |
| High | CVE-2026-68897 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-68896 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-68895 | Internet Storage Name Service Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-68894 | Windows Error Reporting Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-68893 | Remote Desktop Licensing Service Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-68892 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-68891 | Microsoft Standard XPS Information Disclosure Vulnerability | 4.7 | — |
| High | CVE-2026-68890 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-68889 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-68888 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-68887 | Windows Message Queuing Queue Manager Denial of Service Vulnerability | 7.5 | — |
| Medium | CVE-2026-68886 | Windows Network Connection Broker Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-68885 | Microsoft Standard XPS Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-68884 | Windows Kernel Elevation of Privilege Vulnerability | 7.0 | — |
| Medium | CVE-2026-68881 | Microsoft Standard XPS Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-68880 | Windows Win32k Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-68878 | Windows Fast FAT Driver Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-68877 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-68876 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-68875 | Windows NTFS Remote Code Execution Vulnerability | 7.8 | — |
| Medium | CVE-2026-68874 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | 5.7 | — |
| Medium | CVE-2026-68873 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-68852 | Microsoft Account Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-68851 | Windows NTFS Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-68850 | Microsoft Account Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-68849 | Windows Bluetooth Port Driver Information Disclosure Vulnerability | 4.7 | — |
| High | CVE-2026-68848 | Windows Print Spooler Components Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-68847 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-68846 | Windows Kernel Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-68845 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-68844 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | 7.8 | — |
| Medium | CVE-2026-68843 | Microsoft Office Word Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-68842 | Windows MIDI Service Module Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-68841 | Windows NTFS Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-68840 | Windows USB Driver Elevation of Privilege Vulnerability | 7.0 | — |
| Critical | CVE-2026-68839 | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | 9.8 | — |
| High | CVE-2026-68838 | Windows NTFS Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-68837 | Windows File History Service Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-68835 | Windows Print Spooler Components Elevation of Privilege Vulnerability | 7.1 | — |
| High | CVE-2026-68834 | Windows NTFS Elevation of Privilege Vulnerability | 8.0 | — |
| Medium | CVE-2026-68833 | Windows NTFS Remote Code Execution Vulnerability | 6.8 | — |
| High | CVE-2026-68832 | Windows NTFS Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-68831 | Windows Defender Firewall Service Information Disclosure Vulnerability | 5.5 | — |
| Medium | CVE-2026-68830 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | 5.5 | — |
| High | CVE-2026-68828 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-68827 | Windows GDI+ Elevation of Privilege Vulnerability | 8.0 | — |
| High | CVE-2026-68825 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-68824 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | 7.0 | — |
| Critical | CVE-2026-65669 | Microsoft SQL Server Elevation of Privilege Vulnerability | 9.6 | — |
| High | CVE-2026-62813 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | 7.5 | — |
| High | CVE-2026-62810 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | 7.8 | — |
| Medium | CVE-2026-62801 | Microsoft PowerShell Security Feature Bypass Vulnerability | 6.5 | — |
| Medium | CVE-2026-62762 | Windows Active Directory Domain Services Denial of Service Vulnerability | 6.5 | — |
| High | CVE-2026-62759 | Windows Netlogon Spoofing Vulnerability | 7.5 | — |
| High | CVE-2026-62744 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-62706 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | 8.8 | — |
| High | CVE-2026-62697 | Windows Push Notifications Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-62694 | Windows Installer Elevation of Privilege Vulnerability | 7.0 | — |
| High | CVE-2026-58600 | HEVC Video Extensions Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-58599 | HEVC Video Extensions Remote Code Execution Vulnerability | 7.8 | — |
| High | CVE-2026-57098 | Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability | 7.5 | — |
| High | CVE-2026-56198 | Microsoft Trace Data Helper Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-56177 | Windows Server Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-56172 | Windows VHD miniport driver Elevation of Privilege Vulnerability | 7.8 | — |
| High | CVE-2026-55007 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.1 | — |
| High | CVE-2026-50349 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.0 | — |
Embed badge
Show the severity and KEV status of this vulnerability on your site – with a link back here. The image is updated hourly.
<a href="https://intel.neosec.eu/en/cve/CVE-2026-69694"><img src="https://intel.neosec.eu/badge/cve/CVE-2026-69694.svg?lang=en" alt="CVE-2026-69694 – NEOSEC Intel" height="20"></a>