MediumCVE-2026-113815

    HEIF Image Extension: Improper Control of Generation of Code ('Code Injection') (CVE-2026-113815)

    Published Sources: BSI

    Share

    What is affected, what to do

    Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

    Update Microsoft Windows 10 Version 1607 to version 10.0.14393.9688, Microsoft Windows 10 Version 1809 to version 10.0.17763.9487, Microsoft Windows 10 Version 21H2 to version 10.0.19044.7846.

    Affected
    • Microsoft Windows 10 Version 1607 lt 10.0.14393.0..10.0.14393.9688
    • Microsoft Windows 10 Version 1809 lt 10.0.17763.0..10.0.17763.9487
    • Microsoft Windows 10 Version 21H2 lt 10.0.19044.0..10.0.19044.7846
    • Microsoft Windows 10 Version 22H2 lt 10.0.19045.0..10.0.19045.7846
    • Microsoft Windows 11 version 23H2 lt 10.0.22631.0..10.0.22631.7711
    • Microsoft Windows 11 Version 24H2 lt 10.0.26100.0..10.0.26100.9974
    • Microsoft Windows 11 Version 25H2 lt 10.0.26200.0..10.0.26200.9974
    • Microsoft Windows 11 version 26H1 lt 10.0.28000.0..10.0.28000.3501
    • Microsoft Windows 11 Version 26H2 lt 10.0.26300.0..10.0.26300.9974
    • Microsoft Windows Server 2016 lt 10.0.14393.0..10.0.14393.9688
    • Microsoft Windows Server 2016 (Server Core installation) lt 10.0.14393.0..10.0.14393.9688
    • Microsoft Windows Server 2019 lt 10.0.17763.0..10.0.17763.9487
    • Microsoft Windows Server 2019 (Server Core installation) lt 10.0.17763.0..10.0.17763.9487
    • Microsoft Windows Server 2022 lt 10.0.20348.0..10.0.20348.5870
    • Microsoft Windows Server 2025 lt 10.0.26100.0..10.0.26100.33822
    • Microsoft Windows Server 2025 (Server Core installation) lt 10.0.26100.0..10.0.26100.33822
    Fixed in
    • Microsoft Windows 10 Version 1607 10.0.14393.9688
    • Microsoft Windows 10 Version 1809 10.0.17763.9487
    • Microsoft Windows 10 Version 21H2 10.0.19044.7846
    • Microsoft Windows 10 Version 22H2 10.0.19045.7846
    • Microsoft Windows 11 version 23H2 10.0.22631.7711
    • Microsoft Windows 11 Version 24H2 10.0.26100.9974
    • Microsoft Windows 11 Version 25H2 10.0.26200.9974
    • Microsoft Windows 11 version 26H1 10.0.28000.3501
    • Microsoft Windows 11 Version 26H2 10.0.26300.9974
    • Microsoft Windows Server 2016 10.0.14393.9688
    • Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.9688
    • Microsoft Windows Server 2019 10.0.17763.9487
    • Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.9487
    • Microsoft Windows Server 2022 10.0.20348.5870
    • Microsoft Windows Server 2025 10.0.26100.33822
    • Microsoft Windows Server 2025 (Server Core installation) 10.0.26100.33822

    Not sure whether and how you are affected? Ask a question about this vulnerability

    Metrics

    4.7

    XIEM Effective CVSS

    Highest available CVSS rating from NVD and vendor data.

    Source: NVD, CVSS v3

    4.7

    CVSS v3

    Severity Medium on the scale from 0 to 10.

    Source: BSI

    1.9 %

    EPSS score

    Moderate — model estimates 1-10% exploitation likelihood.

    Source: FIRST EPSS, percentile 79.7

    Show all metrics
    Severity
    Medium
    Priority (0–325)

    The priority score is a consolidated metric that condenses several individual signals into a single, action-guiding ranking: technical severity (CVSS), exploitation likelihood (EPSS), known-exploited status (KEV) and the context of the affected asset. The aim is to answer the only truly important question in vulnerability management: what first?

    Read in glossary
    71.26 Methodology
    Exploit maturity

    An exploit is code or a technique that specifically uses a concrete vulnerability to force unintended behaviour — such as executing code or escalating privileges. It is the tool that turns a theoretical flaw into a practical attack.

    Read in glossary
    no public PoC known
    XIEM Effective CVSS

    XIEM® is the tiered managed-security operating model from NEOSEC and a registered trademark of NEOSEC GmbH. It extends classic SIEM — the central collection, normalisation and correlation of security-relevant events — with endpoint forensics, network visibility and deception technology, and consolidates them into three building tiers: Sentry, Orchestrate and Command.

    Read in glossary
    4.7 Methodology
    CVSS v3

    CVSS is the globally established, open standard for assessing the technical severity of a vulnerability on a scale from 0 to 10. It describes how easily a flaw can be exploited and what damage it can cause — but not how likely its actual exploitation is. CVSS and the complementary EPSS deliberately answer different questions.

    Read in glossary
    4.7
    EPSS score

    The EPSS score is the absolute model output for an individual vulnerability: the estimated probability of real-world exploitation within the next 30 days, expressed as a value between 0 and 1 (i.e. 0 % to 100 %). A score of 0.42 means „the model estimates a 42 % chance of real-world exploitation within 30 days“.

    Read in glossary
    1.9 %
    Moderate — model estimates 1-10% exploitation likelihood.
    EPSS percentile

    The EPSS percentile is the relative position of a vulnerability within all EPSS-scored CVEs, expressed as a value between 0 and 1. A percentile of 0.90 means „this CVE has a higher EPSS score than 90 % of all other scored CVEs“. Unlike the EPSS score, it is not a probability — but a positioning within a ranking.

    Read in glossary
    79.7
    High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
    KEV status

    The KEV catalogue is a list maintained by the US authority CISA of vulnerabilities for which active exploitation in the wild has been confirmed. It answers not the question „how severe?“ but „is it already being attacked?“ — thereby sharply prioritising patching.

    Read in glossary
    —
    Published
    CISA assessment (SSVC)
    Exploitation: none known · not automatable · Technical impact: partial
    Source: CISA Vulnrichment, as of 10 November 2026
    CWE

    CWE is a catalogue of typical weakness types in software and hardware — such as flawed input validation, unsafe memory handling or poor authentication. Where a CVE names a concrete vulnerability in a concrete product, a CWE describes the underlying class of defect.

    Read in glossary
    CWE-94

    Detection rules

    No NEOSEC detection rule is available for this vulnerability yet.

    Classification under NIS2 and CRA

    Rule-based classification from exploitation status and severity. It does not replace a case-by-case assessment.

    NIS2

    NIS2 is EU Directive (EU) 2022/2555 to raise the level of cybersecurity across the Union. It substantially broadens obligations compared with the first NIS directive: more sectors, mandatory risk management, staged reporting duties and personal accountability of senior management.

    Read in glossary
    Handle the vulnerability in regular vulnerability handling under Art. 21(2)(e) NIS2.
    CRA

    The CRA is EU Regulation (EU) 2024/2847 setting horizontal cybersecurity requirements for „products with digital elements“ — from industrial controllers and software to connected consumer devices. For the first time manufacturers must ensure security across the entire product lifecycle, handle vulnerabilities and provide security updates.

    Read in glossary
    From 11.12.2027, Annex I Part II CRA requires manufacturers of affected products with digital elements to handle vulnerabilities without delay and provide security updates.
    ISO/IEC 27001

    ISO/IEC 27001 is the internationally leading standard for an information security management system (ISMS). It describes a risk-based, process-oriented framework to systematically plan, implement, review and improve information security.

    Read in glossary
    Control A.8.8, management of technical vulnerabilities: assess relevance to your systems, plan remediation and keep evidence.

    Description

    Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

    Source: BSI WID Portal

    Affected products

    The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

    Affected products
    Affected versionsFixed in
    MicrosoftHEIF Image Extension
    • 1.0.0.0 – < 1.2.62.0
    • 1.2.62.0
    MicrosoftHEVC Video Extensions
    • 1.0.0 – < 2.4.151.0
    • 2.4.151.0
    MicrosoftHEVC Video Extensions for Licensed Applications
    • 2.0.0.0 – < 2.4.150.0
    • 2.4.150.0
    MicrosoftHEVC Video Extensions from Device Manufacturer
    • 2.0.0.0 – < 2.4.149.0
    • 2.4.149.0
    MicrosoftMicrosoft Configuration Manager 2603
    • 1.0.0 – < 5.0.9146.1045
    • 5.0.9146.1045
    MicrosoftMicrosoft GDK
    • 1.0.0.0 – < 2610
    • 2610
    MicrosoftRaw Image Extension
    • 2.1.0.0 – < 2.4.43.0
    • ≥ 2.1.0.0
    • 2.4.43.0
    • —
    MicrosoftWindows 10 Version 1607
    • 10.0.14393.0 – < 10.0.14393.9512
    • 10.0.14393.0 – < 10.0.14393.9612
    • 10.0.14393.0 – < 10.0.14393.9681
    • 10.0.14393.0 – < 10.0.14393.9688
    • 10.0.14393.9512
    • 10.0.14393.9612
    • 10.0.14393.9681
    • 10.0.14393.9688
    MicrosoftWindows 10 Version 1809
    • 10.0.17763.0 – < 10.0.17763.9245
    • 10.0.17763.0 – < 10.0.17763.9376
    • 10.0.17763.0 – < 10.0.17763.9487
    • 10.0.17763.9245
    • 10.0.17763.9376
    • 10.0.17763.9487
    MicrosoftWindows 10 Version 21H2
    • 10.0.19044.0 – < 10.0.19044.7725
    • 10.0.19044.0 – < 10.0.19044.7807
    • 10.0.19044.0 – < 10.0.19044.7846
    • 10.0.19044.7725
    • 10.0.19044.7807
    • 10.0.19044.7846
    MicrosoftWindows 10 Version 22H2
    • 10.0.19045.0 – < 10.0.19045.7725
    • 10.0.19045.0 – < 10.0.19045.7807
    • 10.0.19045.0 – < 10.0.19045.7846
    • 10.0.19045.7725
    • 10.0.19045.7807
    • 10.0.19045.7846
    MicrosoftWindows 11 version 23H2
    • 10.0.22631.0 – < 10.0.22631.7582
    • 10.0.22631.0 – < 10.0.22631.7652
    • 10.0.22631.0 – < 10.0.22631.7711
    • 10.0.22631.7582
    • 10.0.22631.7652
    • 10.0.22631.7711
    MicrosoftWindows 11 Version 24H2
    • 10.0.26100.0 – < 10.0.26100.9168
    • 10.0.26100.0 – < 10.0.26100.9445
    • 10.0.26100.0 – < 10.0.26100.9711
    • 10.0.26100.0 – < 10.0.26100.9911
    • 10.0.26100.0 – < 10.0.26100.9968
    • 10.0.26100.0 – < 10.0.26100.9974
    • 10.0.26100.9168
    • 10.0.26100.9445
    • 10.0.26100.9711
    • 10.0.26100.9911
    • 10.0.26100.9968
    • 10.0.26100.9974
    MicrosoftWindows 11 Version 25H2
    • 10.0.26200.0 – < 10.0.26200.9168
    • 10.0.26200.0 – < 10.0.26200.9445
    • 10.0.26200.0 – < 10.0.26200.9711
    • 10.0.26200.0 – < 10.0.26200.9911
    • 10.0.26200.0 – < 10.0.26200.9968
    • 10.0.26200.0 – < 10.0.26200.9974
    • 10.0.26200.9168
    • 10.0.26200.9445
    • 10.0.26200.9711
    • 10.0.26200.9911
    • 10.0.26200.9968
    • 10.0.26200.9974
    MicrosoftWindows 11 version 26H1
    • 10.0.28000.0 – < 10.0.28000.2704
    • 10.0.28000.0 – < 10.0.28000.2954
    • 10.0.28000.0 – < 10.0.28000.3231
    • 10.0.28000.0 – < 10.0.28000.3501
    • 10.0.28000.2704
    • 10.0.28000.2954
    • 10.0.28000.3231
    • 10.0.28000.3501
    MicrosoftWindows 11 Version 26H2
    • 10.0.26300.0 – < 10.0.26300.9711
    • 10.0.26300.0 – < 10.0.26300.9911
    • 10.0.26300.0 – < 10.0.26300.9968
    • 10.0.26300.0 – < 10.0.26300.9974
    • 10.0.26300.9711
    • 10.0.26300.9911
    • 10.0.26300.9968
    • 10.0.26300.9974
    MicrosoftWindows Admin Center
    • 1809.0 – < 2.1.36
    • 2.1.36
    MicrosoftWindows App Client for Windows Desktop
    • 1.00 – < 2.0.1489.0
    • 2.0.1489.0
    MicrosoftWindows Sandbox
    • 1.0.0.0 – < 0.8.111.0
    • 0.8.111.0
    MicrosoftWindows Server 2012
    • 6.2.9200.0 – < 6.2.9200.26434
    • 6.2.9200.26434

    Vendors and products

    Affected operating systems

    Affected operating systems
    WindowsWindows—

    Weakness classes (CWE)

    • CWE-94Improper Control of Generation of Code ('Code Injection')

      Base

      The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

      Entry at MITRE CWE-94

    References & sources

    Changes to this CVE

    Who changed this CVE and when: NVD (analysis, affected products, CVSS), the CVE publisher (CNA) and additional providers such as CISA (ADP).

    1. Record modifiedCISA ADP

      CISA assessment (SSVC): exploitation: none known, automatable: no

      Show the original change
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      SSVC assessmentadded
      —
      {"id":"CVE-2026-113815","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"version":"2.0.3","timestamp":"2026-11-10T20:09:43.986651Z"}

      Source identifier: 134c704f-9b21-4f2e-91b3-4a467353bcc0

    2. ReceivedMicrosoft

      CVSS V3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

      Weakness type: CWE-94

      Description added or changed

      Show 5 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Descriptionadded
      —
      Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
      CVSSadded
      —
      AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
      Weakness type (CWE)added
      —
      CWE-94
      Affected versions (publisher)added
      —
      New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/113xxx/CVE-2026-113815.json">CVE-2026-113815</a>
      Referenceadded
      —
      https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113815

      Source identifier: secure@microsoft.com

    Linked CVEs

    Linked CVEs
    MediumCVE-2026-97015Windows BitLocker Security Feature Bypass Vulnerability6.8—
    HighCVE-2026-97013Windows Shell Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-97006Windows DNS Information Disclosure Vulnerability4.9—
    HighCVE-2026-97002Microsoft Windows VMSwitch Elevation of Privilege Vulnerability7.5—
    HighCVE-2026-97000Windows USM Communication Manager Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96994Winsock Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96993Windows Performance Monitor Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-96992Windows PCI Bus Driver Elevation of Privilege Vulnerability6.4—
    MediumCVE-2026-96989Secondary Logon Information Disclosure Vulnerability5.5—
    MediumCVE-2026-96988Windows DNS Information Disclosure Vulnerability4.9—
    MediumCVE-2026-96987Windows DNS Information Disclosure Vulnerability4.9—
    MediumCVE-2026-96986Windows DNS Information Disclosure Vulnerability4.9—
    MediumCVE-2026-96985Windows DNS Information Disclosure Vulnerability4.9—
    MediumCVE-2026-96984Windows DNS Information Disclosure Vulnerability4.9—
    MediumCVE-2026-96983Windows DNS Denial of Service Vulnerability5.3—
    MediumCVE-2026-96982HID Parser Library Elevation of Privilege Vulnerability6.8—
    MediumCVE-2026-96981Windows PCI Bus Driver Elevation of Privilege Vulnerability6.4—
    MediumCVE-2026-96980Windows DNS Information Disclosure Vulnerability4.9—
    MediumCVE-2026-96979HID Parser Library Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-96978Windows Credential User Interface Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96976Windows DNS Information Disclosure Vulnerability4.9—
    MediumCVE-2026-96975Role: DNS Server Denial of Service Vulnerability5.9—
    MediumCVE-2026-96974HID Parser Library Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-96973Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability7.0—
    Show 721 more CVEs
    Linked CVEs
    HighCVE-2026-96972Windows DNS Server Information Disclosure Vulnerability7.5—
    HighCVE-2026-96971Windows NetBIOS Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96970Windows DNS Information Disclosure Vulnerability4.9—
    HighCVE-2026-96969Windows TCP/IP Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96965Windows Hyper-V Denial of Service Vulnerability5.3—
    HighCVE-2026-96845Windows Task Scheduler Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96184Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-96179Windows DNS Elevation of Privilege Vulnerability6.7—
    HighCVE-2026-96177Windows Domain Name Service Remote Code Execution Vulnerability8.1—
    HighCVE-2026-96176Windows DNS Denial of Service Vulnerability7.5—
    HighCVE-2026-96175Desktop Window Manager Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96174Desktop Window Manager Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96172Desktop Window Manager Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96171Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96168Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96164Windows Imaging Component Remote Code Execution Vulnerability8.8—
    HighCVE-2026-96162Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96160Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96158Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability7.0—
    CriticalCVE-2026-96157Microsoft Windows Media Foundation Remote Code Execution Vulnerability9.8—
    MediumCVE-2026-96156Windows Broker Infrastructure Service Information Disclosure Vulnerability5.5—
    HighCVE-2026-96155Windows Audio Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96153Windows Error Reporting Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96152Windows Installer Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-96150Microsoft Windows Codecs Library Information Disclosure Vulnerability5.6—
    MediumCVE-2026-96144Windows Graphics Kernel Information Disclosure Vulnerability4.7—
    HighCVE-2026-96139Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96137Windows Graphics Kernel Information Disclosure Vulnerability5.5—
    HighCVE-2026-96134Windows DHCP Server Denial of Service Vulnerability7.5—
    MediumCVE-2026-96133Windows Graphics Kernel Information Disclosure Vulnerability5.5—
    HighCVE-2026-96129Windows Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96127Windows Biometric Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96126Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96124Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96122Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96117Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96115Windows DHCP Client Elevation of Privilege Vulnerability8.0—
    MediumCVE-2026-96112Windows DNS Server Information Disclosure Vulnerability5.5—
    MediumCVE-2026-96110Windows OLE Information Disclosure Vulnerability5.5—
    HighCVE-2026-96107Windows Phone Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96103Desktop Window Manager Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96102Windows TCP/IP Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-96101Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability5.5—
    HighCVE-2026-96097Windows Brokering File System Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96093Windows Internet (wininet.dll) Information Disclosure Vulnerability4.7—
    HighCVE-2026-96092Windows Domain Name Service Remote Code Execution Vulnerability8.1—
    HighCVE-2026-96088Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96086Windows WLAN Service Denial of Service Vulnerability6.5—
    HighCVE-2026-96085Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96084Graphic Fonts Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-96082Windows Kerberos Denial of Service Vulnerability6.5—
    HighCVE-2026-96081Windows Rich Text Edit Control Remote Code Execution Vulnerability7.5—
    CriticalCVE-2026-96078Microsoft Color Management Remote Code Execution Vulnerability9.8—
    HighCVE-2026-96077Windows TCP/IP Denial of Service Vulnerability7.5—
    HighCVE-2026-96076Windows DIAL Client Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96075Windows Feedback Hub Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96074Windows AppX Package Manager Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96073Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96072Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability7.0—
    CriticalCVE-2026-96067Microsoft Color Management Remote Code Execution Vulnerability9.8—
    HighCVE-2026-96066Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96064Windows Domain Name Service Remote Code Execution Vulnerability8.8—
    HighCVE-2026-96062Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96061Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96060Windows Installer Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-96059HID class driver Information Disclosure Vulnerability5.5—
    MediumCVE-2026-96058Windows Kernel Information Disclosure Vulnerability4.6—
    HighCVE-2026-96057Windows USB Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96056Windows USB Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96055Windows USB Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96054Microsoft Color Management Remote Code Execution Vulnerability7.0—
    HighCVE-2026-96053Windows Task Scheduler Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96052Windows Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96051Windows USB Driver Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96048Windows Graphics Kernel Information Disclosure Vulnerability4.7—
    HighCVE-2026-96047Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96046Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96043Windows Connection Manager Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96042Windows Connection Manager Service Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96041Windows USB Hub Driver Information Disclosure Vulnerability5.5—
    HighCVE-2026-96038Windows Audio Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96037Windows User Manager Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96036Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96035Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96031Windows Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96029Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96028Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96027Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96026Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96023Windows Push Notification Core Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-96022Windows Text Services Framework Information Disclosure Vulnerability5.6—
    HighCVE-2026-96020Windows Domain Name Service Remote Code Execution Vulnerability8.8—
    HighCVE-2026-96019Windows Installer Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-96018Windows AppContainer Information Disclosure Vulnerability6.5—
    MediumCVE-2026-96017Role: DNS Server Denial of Service Vulnerability4.9—
    HighCVE-2026-96016Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96010HID Parser Library Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-96008Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96007Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96005Windows USB Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-96004Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-96002Windows Domain Name Service Remote Code Execution Vulnerability8.8—
    MediumCVE-2026-96001Windows Bluetooth Service Information Disclosure Vulnerability5.5—
    HighCVE-2026-95999Windows USB Hub Driver Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-95998Windows StateRepository API Tampering Vulnerability4.4—
    HighCVE-2026-95997Windows Event Logging Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95996Windows Bluetooth Port Driver Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-95991Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95989vhdmp.sys Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95988Windows Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95987Windows User Manager Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95983Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95979Windows Brokering File System Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-95977Windows Event Viewer Information Disclosure Vulnerability5.5—
    HighCVE-2026-95976Windows Diagnostic Policy Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95975Windows Performance Counters Remote Code Execution Vulnerability8.8—
    HighCVE-2026-95974Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95973Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95971Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95968Windows Smart Card Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95966Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95965Windows USB Video Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95964Remote Desktop Client Remote Code Execution Vulnerability7.5—
    HighCVE-2026-95963Data Sharing Service Client Elevation of Privilege Vulnerability7.8—
    CriticalCVE-2026-95962Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability9.0—
    HighCVE-2026-95961Windows USB Video Driver Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95960Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-95956Windows eSCL Scanner Remote Code Execution Vulnerability8.1—
    HighCVE-2026-95953Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95951Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95950Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95948Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95947Windows Error Reporting Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-95946Windows Graphics Kernel Information Disclosure Vulnerability5.5—
    MediumCVE-2026-95944Windows App Readiness Service Tampering Vulnerability5.5—
    HighCVE-2026-95942Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95938Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95935Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95934Windows Diagnostic Policy Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95933Windows OLE Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95932Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95923Windows HTTP.sys Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95922Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95920Windows Management Instrumentation Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-95913Windows Hyper-V Denial of Service Vulnerability5.9—
    MediumCVE-2026-95910Windows Hyper-V Security Feature Bypass Vulnerability6.7—
    HighCVE-2026-95909Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-95908Windows Remote Desktop Client Information Disclosure Vulnerability5.5—
    HighCVE-2026-95906Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-95905Windows Kernel Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-95902Windows USB Hub Driver Elevation of Privilege Vulnerability7.8—
    CriticalCVE-2026-95901Microsoft DirectMusic Remote Code Execution Vulnerability9.8—
    HighCVE-2026-95898Windows iSCSI Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95896Microsoft DirectMusic Remote Code Execution Vulnerability7.8—
    HighCVE-2026-95895Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95894Windows Task Scheduler Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-95893Win32k Information Disclosure Vulnerability5.5—
    HighCVE-2026-95891Microsoft DirectMusic Remote Code Execution Vulnerability7.8—
    MediumCVE-2026-95889Windows Storage Elevation of Privilege Vulnerability6.6—
    HighCVE-2026-95888Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95885Windows Client for NFS Elevation of Privilege Vulnerability8.1—
    MediumCVE-2026-95884Windows Active Directory Certificate Services Information Disclosure Vulnerability5.3—
    CriticalCVE-2026-95882Microsoft DirectMusic Remote Code Execution Vulnerability9.8—
    HighCVE-2026-95881Windows Push Notifications Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95879Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95877Windows Biometric Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95876Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-95874Xbox Gaming Services Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95872Windows USB Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-95871Windows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-94531Windows COM Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-94529Windows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-94527Windows GDI Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-94525Windows Error Reporting Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-94522Windows Kernel Transaction Manager Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-94519Windows Graphics Kernel Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-94517Windows Kernel Transaction Manager Information Disclosure Vulnerability5.5—
    HighCVE-2026-94515Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-94514Windows Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-94507DirectX Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88249Windows Client for NFS Remote Code Execution Vulnerability8.8—
    MediumCVE-2026-88247Windows Program Compatibility Assistant Service Information Disclosure Vulnerability5.5—
    HighCVE-2026-88245Windows Brokering File System Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88244Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability7.5—
    CriticalCVE-2026-88243Windows DHCP Server Remote Code Execution Vulnerability9.8—
    HighCVE-2026-88242Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-88241Windows Sensor Data Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88240Windows DHCP Client Elevation of Privilege Vulnerability8.0—
    HighCVE-2026-88239Windows Biometric Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88238Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88237Windows Subsystem for Linux Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-88236Microsoft QUIC Denial of Service Vulnerability7.5—
    HighCVE-2026-88235Servicing Stack Updates Elevation of Privilege Vulnerability7.8—
    CriticalCVE-2026-88234Windows iSCSI Remote Code Execution Vulnerability9.8—
    HighCVE-2026-88233Windows Task Scheduler Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88232Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-88231Windows iSCSI Information Disclosure Vulnerability5.7—
    HighCVE-2026-88230Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88229Windows Media Player Remote Code Execution Vulnerability8.8—
    HighCVE-2026-88228Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-88227Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88224Windows AppX Deployment Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-88222Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability8.8—
    HighCVE-2026-88221Windows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-88220Windows Performance Counters Information Disclosure Vulnerability5.5—
    CriticalCVE-2026-88218Windows DNS Remote Code Execution Vulnerability9.8—
    MediumCVE-2026-88217Windows Graphics Kernel Information Disclosure Vulnerability5.5—
    HighCVE-2026-88216Windows DHCP Server Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-88215Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability6.4—
    HighCVE-2026-88213Windows Bluetooth Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-88212Windows Network Address Translation (NAT) Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-88211Graphic Fonts Information Disclosure Vulnerability5.7—
    HighCVE-2026-88187Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability8.0—
    HighCVE-2026-85942Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-85929Microsoft Brokering File System Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-85907Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability4.4—
    HighCVE-2026-85862Windows Error Reporting Elevation of Privilege Vulnerability7.0—
    CriticalCVE-2026-85844Windows Kerberos Elevation of Privilege Vulnerability9.8—
    HighCVE-2026-85839Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability8.8—
    HighCVE-2026-85838Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability8.8—
    HighCVE-2026-85801Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-84005AMD Zen Information Disclosure Vulnerability5.5—
    MediumCVE-2026-84004AMD Zen Information Disclosure Vulnerability5.5—
    HighCVE-2026-83894RPC Runtime Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-83684Windows iSCSI Target Service Information Disclosure Vulnerability7.5—
    HighCVE-2026-83563Winlogon Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-81384Windows DNS Server Remote Code Execution Vulnerability8.1—
    HighCVE-2026-80094Remote Desktop Gateway Service Elevation of Privilege Vulnerability7.5—
    HighCVE-2026-72998Windows DHCP Server Remote Code Execution Vulnerability8.1—
    HighCVE-2026-70240Windows Kerberos Denial of Service Vulnerability7.5—
    HighCVE-2026-70231Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-70182Windows Bind Filter Driver Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-70120Microsoft Bluetooth Driver Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-69565Windows Remote Desktop Services Remote Code Execution Vulnerability7.0—
    HighCVE-2026-69327Windows Remote Desktop Services Remote Code Execution Vulnerability7.4—
    CriticalCVE-2026-66801Microsoft Xbox Remote Code Execution Vulnerability9.8—
    HighCVE-2026-125137Windows Graphics Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-125136Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability8.8—
    MediumCVE-2026-125135HID Parser Library Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-125134Windows Function Discovery Resource Publication Remote Code Execution Vulnerability7.5—
    HighCVE-2026-124226Microsoft PowerShell Security Feature Bypass Vulnerability8.8—
    HighCVE-2026-124225Windows PowerShell Remote Code Execution Vulnerability7.8—
    HighCVE-2026-124224PowerShell Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-123389Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-123388Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-123387Active Directory Domain Services Elevation of Privilege Vulnerability8.0—
    HighCVE-2026-122988Windows Admin Center Elevation of Privilege Vulnerability8.0—
    HighCVE-2026-122984Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-122475Windows Storage Spaces Controller Remote Code Execution Vulnerability8.8—
    MediumCVE-2026-122474Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability5.9—
    MediumCVE-2026-122297Windows Kernel Transaction Manager Information Disclosure Vulnerability5.5—
    HighCVE-2026-122183Windows Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-122182Windows Maps Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-122179Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-122177Windows iSCSI Elevation of Privilege Vulnerability7.5—
    HighCVE-2026-122176Windows SMB Remote Code Execution Vulnerability8.8—
    HighCVE-2026-122175Windows Autopilot Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-122174Windows Task Scheduler Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-122173HID Parser Library Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-122172Microsoft Trace Data Helper Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-122171Microsoft XPS Document Converter Remote Code Execution Vulnerability8.8—
    HighCVE-2026-122170Windows Win32k Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-122169Windows IKE Extension Spoofing Vulnerability7.5—
    HighCVE-2026-122168Microsoft Windows Media Foundation Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-122167Windows USB Driver Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-122166Windows Remote Desktop Services Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-122165Windows Client for NFS Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-122164Windows Kerberos Elevation of Privilege Vulnerability8.0—
    HighCVE-2026-122163Windows Image Acquisition Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-122162Windows Update Stack Information Disclosure Vulnerability5.5—
    HighCVE-2026-121681Microsoft Trace Data Helper Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-121680Windows NTLM Spoofing Vulnerability7.5—
    MediumCVE-2026-121678Windows Remote Desktop Client Information Disclosure Vulnerability5.3—
    MediumCVE-2026-121677Windows Remote Desktop Client Information Disclosure Vulnerability6.5—
    HighCVE-2026-121673Windows Filter Manager Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-121671Windows Audio Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-121670Windows Overlay Filter Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119992Windows HTTP.sys Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119991Microsoft Configuration Manager Information Disclosure Vulnerability5.9—
    HighCVE-2026-119988Windows SMB Remote Code Execution Vulnerability7.1—
    HighCVE-2026-119987Microsoft Windows App Store Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119974Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119972Remote Procedure Call Denial of Service Vulnerability5.9—
    MediumCVE-2026-119971Windows DNS Server Information Disclosure Vulnerability4.9—
    MediumCVE-2026-119970Windows DNS Information Disclosure Vulnerability4.9—
    HighCVE-2026-119969Graphic Fonts Remote Code Execution Vulnerability8.8—
    HighCVE-2026-119967Windows Message Queuing Queue Manager Remote Code Execution Vulnerability8.1—
    HighCVE-2026-119966Windows Graphics Kernel Elevation of Privilege Vulnerability7.5—
    MediumCVE-2026-119965Windows Kernel Elevation of Privilege Vulnerability6.4—
    HighCVE-2026-119964Windows Message Queuing Remote Code Execution Vulnerability8.1—
    HighCVE-2026-119963Windows Message Queuing Remote Code Execution Vulnerability8.1—
    HighCVE-2026-119962Windows CredSSP Remote Code Execution Vulnerability8.1—
    HighCVE-2026-119961Windows Internet Information Services Remote Code Execution Vulnerability8.1—
    HighCVE-2026-119960Windows Hyper-V Elevation of Privilege Vulnerability7.5—
    MediumCVE-2026-119959Windows Hyper-V Spoofing Vulnerability5.3—
    CriticalCVE-2026-119958Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability9.8—
    HighCVE-2026-119957Windows Remote Desktop Services Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119955Windows Hyper-V Denial of Service Vulnerability6.0—
    HighCVE-2026-119954Microsoft Windows Search Component Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119953Windows DNS Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119952Windows Schannel Remote Code Execution Vulnerability8.1—
    HighCVE-2026-119951Windows Deployment Services Remote Code Execution Vulnerability8.1—
    HighCVE-2026-119950Windows Print Spooler Components Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-119948Windows Active Directory Remote Code Execution Vulnerability7.5—
    HighCVE-2026-119947Windows Hyper-V Elevation of Privilege Vulnerability7.5—
    MediumCVE-2026-119946HTTP.sys Information Disclosure Vulnerability5.9—
    HighCVE-2026-119945Windows Modern Device Management (MDM) Remote Code Execution Vulnerability8.1—
    HighCVE-2026-119944Windows Mobile Device Management Elevation of Privilege Vulnerability7.5—
    HighCVE-2026-119943Microsoft Windows Search Component Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119942HTTP.sys Information Disclosure Vulnerability4.7—
    HighCVE-2026-119941Volume Shadow Copy Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119940Windows Kerberos Denial of Service Vulnerability6.5—
    HighCVE-2026-119939Windows Print Spooler Components Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119938Windows Shell Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-119937Kernel Streaming Service Driver Elevation of Privilege Vulnerability6.6—
    MediumCVE-2026-119936Windows Internet Information Services Denial of Service Vulnerability5.9—
    MediumCVE-2026-119935Windows Kernel Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-119934Remote Desktop Client Remote Code Execution Vulnerability8.8—
    HighCVE-2026-119933Windows NTFS Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119932Windows Remote Desktop Denial of Service Vulnerability7.5—
    HighCVE-2026-119931Windows Text Services Framework Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119929Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119928Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119925Windows Text Services Framework Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-119921Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119919Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119918Windows Kernel Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-119917Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119916Windows Input System Elevation of Privilege Vulnerability8.8—
    MediumCVE-2026-119914Windows Setup and Deployment Elevation of Privilege Vulnerability6.7—
    HighCVE-2026-119913Windows Print Spooler Components Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119912Windows Kernel Elevation of Privilege Vulnerability6.7—
    MediumCVE-2026-119910Win32k Information Disclosure Vulnerability4.7—
    MediumCVE-2026-119909Windows Internet Information Services Denial of Service Vulnerability5.9—
    HighCVE-2026-119908Windows Storage Spaces Controller Remote Code Execution Vulnerability8.8—
    HighCVE-2026-119907Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119906Windows Sandbox Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119905Windows DNS Spoofing Vulnerability4.9—
    HighCVE-2026-119904Microsoft Windows Speech Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119903Windows Installer Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119901Windows MIDI Service Module Elevation of Privileges Vulnerability6.4—
    HighCVE-2026-119900Windows NTFS Elevation of Privilege Vulnerability7.3—
    HighCVE-2026-119899Windows Win32k Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119898Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119895Windows Audio Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119894Windows Audio Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119893Windows Audio Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119892Windows Installer Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119890Windows DHCP Server Denial of Service Vulnerability5.3—
    MediumCVE-2026-119889ActiveSyncProvider Information Disclosure Vulnerability6.5—
    HighCVE-2026-119888Windows Audio Service Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119887Windows Installer Information Disclosure Vulnerability6.5—
    HighCVE-2026-119886Windows Telephony Service Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119885Windows Storport Miniport Driver Elevation of Privilege Vulnerability6.8—
    MediumCVE-2026-119884Windows Kernel Elevation of Privilege Vulnerability6.8—
    LowCVE-2026-119883Data Deduplication Security Feature Bypass Vulnerability3.3—
    MediumCVE-2026-119882Windows Remote Desktop Services Information Disclosure Vulnerability5.3—
    HighCVE-2026-119881Microsoft XPS Document Converter Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-119880Microsoft XPS Document Converter Remote Code Execution Vulnerability7.5—
    HighCVE-2026-119876Windows USB Scanner Driver Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119875Windows Storport Miniport Driver Information Disclosure Vulnerability4.0—
    HighCVE-2026-119874Windows Device Association Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119873Windows NetBIOS Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119872Windows USB Driver Elevation of Privilege Vulnerability6.4—
    MediumCVE-2026-119871Windows IP Translation Configuration Service Elevation of Privilege Vulnerability6.4—
    HighCVE-2026-119870Windows SMB Client Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119869Windows Failover Cluster Elevation of Privilege Vulnerability6.4—
    HighCVE-2026-119868Windows Kernel Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119867Windows Installer Security Feature Bypass Vulnerability5.3—
    HighCVE-2026-119866Windows Device Association Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119865Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119862Windows Input System Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-119861Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119860Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119859Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119858Remote Desktop Client Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-119857Windows Kernel Information Disclosure Vulnerability5.5—
    MediumCVE-2026-119856Win32k Information Disclosure Vulnerability5.5—
    MediumCVE-2026-119855Windows COM+ Event System Service Information Disclosure Vulnerability5.5—
    HighCVE-2026-119853Remote Access API Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119852Windows Installer Elevation of Privilege Vulnerability6.7—
    HighCVE-2026-119851Windows Storage Spaces Controller Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119849Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability7.0—
    MediumCVE-2026-119848Windows Message Queuing Denial of Service Vulnerability5.3—
    HighCVE-2026-119847Windows Kerberos Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119846Windows Subsystem for Linux Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119844Windows Device Association Service Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119841Windows Graphics Kernel Information Disclosure Vulnerability4.7—
    MediumCVE-2026-119840Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability6.3—
    HighCVE-2026-119839Windows Remote Desktop Client Elevation of Privilege Vulnerability8.8—
    MediumCVE-2026-119838Windows Installer Information Disclosure Vulnerability4.7—
    HighCVE-2026-119837Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.5—
    MediumCVE-2026-119836Windows Management Services Information Disclosure Vulnerability4.7—
    HighCVE-2026-119835Windows Smart Card Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119834Windows Subsystem for Linux Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119833Windows Message Queuing Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119832Windows BitLocker Security Feature Bypass Vulnerability5.9—
    HighCVE-2026-119831Windows Installer Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119830Windows Storport Miniport Driver Elevation of Privilege Vulnerability6.8—
    MediumCVE-2026-119829Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-119827Windows Win32k Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119826Windows Hyper-V Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-119825Win32k Information Disclosure Vulnerability5.5—
    HighCVE-2026-119824Remote Desktop Client Tampering Vulnerability8.8—
    MediumCVE-2026-119823Windows Storport Miniport Driver Remote Code Execution Vulnerability6.8—
    HighCVE-2026-119822Windows Overlay Filter Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119821Windows Network Connection Broker Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119818Windows Text Services Framework Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119817Windows Shell Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119816Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119405Windows Backup Engine Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119404Windows Client for NFS Security Feature Bypass Vulnerability5.9—
    HighCVE-2026-119403Windows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119402Windows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119401Windows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119399Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119398Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119397Windows Kernel Transaction Manager Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119396Windows Remote Access API Tampering Vulnerability6.5—
    MediumCVE-2026-119395Storport.sys Driver Information Disclosure Vulnerability4.0—
    MediumCVE-2026-119394Windows Enhanced Storage Remote Code Execution Vulnerability6.6—
    HighCVE-2026-119393Windows Credential Manager Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119392Windows Storage Spaces Controller Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-119391Windows Hyper-V Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-119390Remote Desktop Client Remote Code Execution Vulnerability7.8—
    HighCVE-2026-119389Windows Storage Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119388Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119387Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-119386Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-119385Windows Hyper-V Denial of Service Vulnerability4.7—
    MediumCVE-2026-119383Windows Smart Card Elevation of Privilege Vulnerability6.6—
    HighCVE-2026-119382Windows TPM Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-118739Windows DHCP Client Denial of Service Vulnerability6.5—
    HighCVE-2026-118737Remote Procedure Call Runtime Remote Code Execution Vulnerability8.1—
    MediumCVE-2026-118736Windows Network File System Information Disclosure Vulnerability5.5—
    HighCVE-2026-118735Active Directory Domain Services Elevation of Privilege Vulnerability7.5—
    HighCVE-2026-118283Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118280Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118279Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118278Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118277Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118232Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118229Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118228Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118227Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118226Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118225Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118224Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118223Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118222Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118221Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118220Windows Multiple Provider Router Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118219Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118218Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118217Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118216Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-118215Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-118214Windows Advanced Rasterization Platform Information Disclosure Vulnerability6.5—
    MediumCVE-2026-118213Windows Deployment Services Information Disclosure Vulnerability5.9—
    HighCVE-2026-118148Active Directory Domain Services Elevation of Privilege Vulnerability7.5—
    HighCVE-2026-118146Windows Active Directory Domain Services Remote Code Execution Vulnerability8.8—
    HighCVE-2026-118145Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-118144Windows Smart Card Elevation of Privilege Vulnerability6.6—
    MediumCVE-2026-118143Windows Kernel Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-118142Windows Distributed File System (DFS) Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118141Windows Client for NFS Remote Code Execution Vulnerability8.8—
    MediumCVE-2026-118140Server for NFS Information Disclosure Vulnerability5.5—
    HighCVE-2026-118138Windows Client for NFS Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118137Windows FTP Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118126Windows Message Queuing Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-118125Windows Message Queuing Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-118124Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-118123Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability7.0—
    CriticalCVE-2026-116928Windows Search Remote Code Execution Vulnerability9.8—
    HighCVE-2026-116714Windows AppX Deployment Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-116710Windows Message Queuing Remote Code Execution Vulnerability8.1—
    HighCVE-2026-116707Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-116706Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-116700Windows Telephony Service Elevation of Privilege Vulnerability6.6—
    MediumCVE-2026-116699Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability6.5—
    HighCVE-2026-116698Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-116697Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability5.9—
    HighCVE-2026-114170Windows Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-114169Windows Raw Image Extension Remote Code Execution Vulnerability8.8—
    HighCVE-2026-114167HEVC Video Extensions Remote Code Execution Vulnerability7.8—
    MediumCVE-2026-114166Microsoft Raw Image Extension Information Disclosure Vulnerability5.5—
    HighCVE-2026-114165HEVC Video Extensions Remote Code Execution Vulnerability7.8—
    HighCVE-2026-114164HEVC Video Extensions Remote Code Execution Vulnerability8.8—
    HighCVE-2026-113865Windows Hyper-V Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-113864Windows Hyper-V Elevation of Privilege Vulnerability6.4—
    HighCVE-2026-113863Windows DHCP Client Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-113862Windows Network Address Translation (NAT) Remote Code Execution Vulnerability8.1—
    HighCVE-2026-113861Windows Hyper-V Elevation of Privilege Vulnerability7.5—
    HighCVE-2026-113860Windows Hyper-V Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113859Windows TCP/IP Remote Code Execution Vulnerability7.5—
    HighCVE-2026-113856Windows Hyper-V Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-113855Windows DNS Remote Code Execution Vulnerability7.5—
    HighCVE-2026-113848Windows NTFS Remote Code Execution Vulnerability7.8—
    HighCVE-2026-113847Windows Installer Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-113844Windows NTFS Tampering Vulnerability5.5—
    HighCVE-2026-113843Windows Remote Access Connection Manager Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-113842Windows Security Center Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113825Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-113821Microsoft Windows SCSI Class System File Information Disclosure Vulnerability4.1—
    HighCVE-2026-113820Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113819Desktop Window Manager Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-113818Windows Deployment Services Information Disclosure Vulnerability6.5—
    MediumCVE-2026-113817Windows Devices Human Interface Elevation of Privilege Vulnerability6.6—
    MediumCVE-2026-113816Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability4.1—
    MediumCVE-2026-113815Microsoft PowerShell Security Feature Bypass Vulnerability4.7—
    HighCVE-2026-113814Windows Storage Spaces Controller Remote Code Execution Vulnerability8.8—
    MediumCVE-2026-113773Windows DHCP Server Spoofing Vulnerability5.3—
    MediumCVE-2026-113772Windows Redirected Drive Buffering Information Disclosure Vulnerability4.7—
    MediumCVE-2026-113771Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability5.5—
    HighCVE-2026-113770Windows Print Spooler Components Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113769Windows COM+ Event System Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113768Windows Performance Counters Remote Code Execution Vulnerability7.5—
    HighCVE-2026-113767Windows COM+ Event System Service Elevation of Privilege Vulnerability7.8—
    LowCVE-2026-113766Windows Language Experience Service Tampering Vulnerability3.3—
    HighCVE-2026-113765Windows File Server Resource Management Service Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-113764Windows Projected File System Information Disclosure Vulnerability4.7—
    MediumCVE-2026-113763Microsoft Windows: Use of a Broken or Risky Cryptographic Algorithm6.3—
    HighCVE-2026-113762Windows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113761Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113760Windows XWizard Framework Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-113758Windows Desktop Window Manager Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-113757Windows FileCrypt Driver Information Disclosure Vulnerability5.5—
    MediumCVE-2026-113756Windows FileCrypt Driver Security Feature Bypass Vulnerability5.3—
    HighCVE-2026-113755Windows Filter Manager Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-113754Windows FileCrypt Driver Information Disclosure Vulnerability4.7—
    HighCVE-2026-113753Windows Hyper-V Elevation of Privilege Vulnerability8.2—
    HighCVE-2026-113752Windows Print Spooler Components Remote Code Execution Vulnerability7.5—
    HighCVE-2026-113751Windows Fast FAT Driver Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113750Windows Device Inventory Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-113749Microsoft Windows Codecs Library Remote Code Execution Vulnerability7.5—
    HighCVE-2026-113748Software Protection Platform (SPP) Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-112990Windows USB Video Driver Elevation of Privilege Vulnerability4.7—
    HighCVE-2026-112989Windows Servicing Stack Updates Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-112988Windows Desktop Window Manager Elevation of Privilege Vulnerability5.5—
    HighCVE-2026-112987Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112986Windows DWM Core Library Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112985Windows JScript Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-112984Windows USB Video Driver Elevation of Privilege Vulnerability6.6—
    MediumCVE-2026-112982Microsoft Account Tampering Vulnerability5.5—
    HighCVE-2026-112981Windows Print Spooler Components Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-112980Windows Print Spooler Components Elevation of Privilege Vulnerability6.7—
    MediumCVE-2026-112979Windows State Repository Service Tampering Vulnerability5.5—
    HighCVE-2026-112978Windows Print Spooler Components Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-112977Windows Deployment Services Information Disclosure Vulnerability5.5—
    HighCVE-2026-112976Windows Print Spooler Components Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-112975Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability5.3—
    MediumCVE-2026-112974Microsoft Account Tampering Vulnerability5.5—
    HighCVE-2026-112973Windows Kernel Security Feature Bypass Vulnerability7.1—
    HighCVE-2026-112972Windows SMBv3 Server Remote Code Execution Vulnerability7.5—
    HighCVE-2026-112971Windows SMB Client Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112970Windows SMB Client Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-112969Windows Kernel Elevation of Privilege Vulnerability6.6—
    HighCVE-2026-112968Windows COM Elevation of Privilege Vulnerability7.0—
    CriticalCVE-2026-112967Windows Xbox Live Networking Service Remote Code Execution Vulnerability9.8—
    HighCVE-2026-112966Windows Security Account Manager Denial of Service Vulnerability7.5—
    MediumCVE-2026-112965Windows Management Instrumentation Information Disclosure Vulnerability5.5—
    MediumCVE-2026-112814Windows Management Instrumentation Elevation of Privilege Vulnerability5.5—
    MediumCVE-2026-112813Windows Overlay Filter Elevation of Privilege Vulnerability4.7—
    HighCVE-2026-112812Windows SMB Client Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112811Windows Print Spooler Components Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-112810Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-112809Windows Composite Image File System Information Disclosure Vulnerability5.5—
    MediumCVE-2026-112808Windows Print Spooler Components Information Disclosure Vulnerability6.5—
    MediumCVE-2026-112807Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability6.5—
    MediumCVE-2026-112806Windows Print Spooler Components Information Disclosure Vulnerability4.7—
    HighCVE-2026-112805Windows Kernel Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-112804Windows exFAT File System Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-112803Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability5.5—
    HighCVE-2026-112802Windows Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-112801Windows eSCL Scanner Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-112800Windows Diagnostic Policy Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112799Windows Projected File System Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-112798Windows NetBIOS Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112797Windows Print Spooler Components Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112796Windows Event Collector Service Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-112795Windows Security Account Manager Denial of Service Vulnerability6.5—
    HighCVE-2026-112794Windows Smart Card Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-112793Windows Event Collector Service Elevation of Privilege Vulnerability7.5—
    HighCVE-2026-112792Windows Print Spooler Components Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112791Windows Print Spooler Components Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112790Windows Kernel Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-112789Windows Installer Information Disclosure Vulnerability4.7—
    HighCVE-2026-112766Windows exFAT File System Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112765Windows Print Spooler Components Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112764Windows USB Driver Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112763Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112762Windows Print Spooler Components Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-112761Windows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112760Windows Overlay Filter Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-112759Windows Task Scheduler Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112758Windows Defender Firewall Service Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-112757Windows Secure Kernel Mode Information Disclosure Vulnerability6.0—
    HighCVE-2026-112756Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-112755Windows RNDIS Elevation of Privilege Vulnerability6.8—
    MediumCVE-2026-112754Microsoft Graphics Component Information Disclosure Vulnerability5.5—
    HighCVE-2026-112753Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-112752Windows Print Spooler Components Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-112751Windows Remote Assistance Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-112750Windows Overlay Filter Information Disclosure Vulnerability5.5—
    HighCVE-2026-112743Windows Device Association Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-112727Windows Domain Name Service Remote Code Execution Vulnerability8.8—
    HighCVE-2026-109473Windows Kernel Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-109463Windows DNS Remote Code Execution Vulnerability8.8—
    HighCVE-2026-109459Windows Message Queuing Queue Manager Remote Code Execution Vulnerability8.1—
    MediumCVE-2026-108425Windows DNS Information Disclosure Vulnerability5.9—
    MediumCVE-2026-108424Windows GDI Information Disclosure Vulnerability6.5—
    MediumCVE-2026-108423Windows WinHTTP Information Disclosure Vulnerability4.7—
    HighCVE-2026-108421Windows File Server Resource Management Service Elevation of Privilege Vulnerability7.5—
    MediumCVE-2026-108419Windows Remote Desktop Client Information Disclosure Vulnerability6.5—
    MediumCVE-2026-108418Windows Remote Desktop Client Information Disclosure Vulnerability6.5—
    MediumCVE-2026-108417Windows Remote Desktop Client Information Disclosure Vulnerability6.5—
    MediumCVE-2026-108416Windows File Server Resource Management Service Elevation of Privilege Vulnerability6.8—
    MediumCVE-2026-108415Windows File Server Resource Management Service Elevation of Privilege Vulnerability6.8—
    HighCVE-2026-108414Windows Projected File System Filter Driver Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-108413Windows Telephony Service Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-108412Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-108411Microsoft ODBC Driver Remote Code Execution Vulnerability8.8—
    MediumCVE-2026-108410Windows Management Instrumentation Information Disclosure Vulnerability5.5—
    MediumCVE-2026-108409Windows Overlay Filter Information Disclosure Vulnerability5.5—
    MediumCVE-2026-108408Windows Telephony Service Information Disclosure Vulnerability5.5—
    HighCVE-2026-108407Windows GDI Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-108406Windows Network Connection Broker Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-108405Windows CD-ROM Driver Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-108404Windows CD-ROM Driver Remote Code Execution Vulnerability6.8—
    HighCVE-2026-108403Windows Kernel Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-108402Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability5.3—
    HighCVE-2026-108401Remote Desktop Services Remote Code Execution Vulnerability8.8—
    MediumCVE-2026-105590Windows Active Directory Certificate Services Security Feature Bypass5.3—
    HighCVE-2026-105589Windows Wireless Networking Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-105588Windows DHCP Server Elevation of Privilege Vulnerability6.4—
    HighCVE-2026-105587Windows OLE DB Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105586Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-105584Windows Inventory Backup Information Disclosure Vulnerability5.5—
    HighCVE-2026-105583Windows DWM Core Library Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105582Windows DWM Core Library Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105581Desktop Window Manager Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105580Windows Management Instrumentation Remote Code Execution Vulnerability7.8—
    HighCVE-2026-105579Windows DNS Information Disclosure Vulnerability7.5—
    HighCVE-2026-105578Microsoft JScript Remote Code Execution Vulnerability7.5—
    HighCVE-2026-105575Windows DWM Core Library Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105574Windows MIDI Service Module Elevation of Privileges Vulnerability7.0—
    HighCVE-2026-105569Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-105568Windows Active Directory Domain Services Denial of Service Vulnerability6.5—
    HighCVE-2026-105567Windows Print Spooler Components Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105566Windows Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105565Windows MIDI Service Module Elevation of Privileges Vulnerability7.0—
    MediumCVE-2026-105562Windows Container Manager Service Information Disclosure Vulnerability4.7—
    HighCVE-2026-105561Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability7.5—
    HighCVE-2026-105560Windows DHCP Server Remote Code Execution Vulnerability7.2—
    MediumCVE-2026-105559Windows Active Directory Denial of Service Vulnerability6.5—
    HighCVE-2026-105558Windows Deployment Services Remote Code Execution Vulnerability7.5—
    MediumCVE-2026-105557Windows DHCP Server Information Disclosure Vulnerability5.9—
    HighCVE-2026-105554Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105553Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-105552Windows Kernel Information Disclosure Vulnerability5.5—
    HighCVE-2026-105551Windows NetBIOS Elevation of Privilege Vulnerability7.5—
    MediumCVE-2026-105549Windows Smart Card Information Disclosure Vulnerability4.3—
    HighCVE-2026-105547Windows Setup and Deployment Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105546Windows Management Instrumentation Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105545Windows Installer Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105543Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105542Windows NTFS Remote Code Execution Vulnerability8.8—
    HighCVE-2026-105541Windows Audio Service Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105540Windows Error Reporting Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-105537Mailslot File System Information Disclosure Vulnerability5.5—
    HighCVE-2026-105534Windows Storage Remote Code Execution Vulnerability8.8—
    HighCVE-2026-105533Windows COM Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105532Windows Installer Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-105531Windows Print Spooler Components Information Disclosure Vulnerability5.5—
    MediumCVE-2026-105530Windows System Events Broker Information Disclosure Vulnerability5.5—
    HighCVE-2026-105529Windows Storage Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105528Desktop Window Manager Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-105527Windows Encrypting File System (EFS) Denial of Service Vulnerability5.5—
    HighCVE-2026-105526Winsock Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105525Windows Network Connection Broker Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105524Windows Management Instrumentation Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105522Winlogon Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105520Windows DNS Elevation of Privilege Vulnerability7.2—
    HighCVE-2026-105518Windows iSCSI Remote Code Execution Vulnerability8.8—
    HighCVE-2026-105515Windows Message Queuing Denial of Service Vulnerability7.5—
    HighCVE-2026-105513Windows Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105512Microsoft QUIC Denial of Service Vulnerability7.5—
    HighCVE-2026-105511Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105510Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105509Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105507Windows Installer Elevation of Privilege Vulnerability7.8—
    MediumCVE-2026-105506Windows Shell Information Disclosure Vulnerability5.0—
    HighCVE-2026-105505Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105504Windows Kernel Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105503Windows Management Instrumentation Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105501Windows Installer Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105499Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105498Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105497Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105496Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105495Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105493Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    MediumCVE-2026-105492Microsoft Remote Registry Service Denial of Service Vulnerability5.3—
    HighCVE-2026-105491Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105490Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105028Windows Win32k Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105026Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105025Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105024Windows Storage Spaces Controller Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-105023Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105022Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-105021Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    HighCVE-2026-105020Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability8.8—
    MediumCVE-2026-105018Windows Partition Management Driver Elevation of Privilege Vulnerability6.6—
    HighCVE-2026-105017Volume Shadow Copy Elevation of Privilege Vulnerability7.0—
    HighCVE-2026-103571Windows CNG Key Isolation Service Elevation of Privilege Vulnerability7.0—
    MediumCVE-2026-102868Windows Shell Information Disclosure Vulnerability5.5—
    HighCVE-2026-102219Windows Modern Device Management (MDM) Remote Code Execution Vulnerability8.1—
    MediumCVE-2026-102200Windows NTFS Tampering Vulnerability4.7—
    HighCVE-2026-100223Windows NTFS Elevation of Privilege Vulnerability7.8—
    HighCVE-2026-100204HEIF Image Extensions Remote Code Execution Vulnerability7.0—
    Embed badge

    Show the severity and KEV status of this vulnerability on your site – with a link back here. The image is updated hourly.

    Badge preview for CVE-2026-113815
    <a href="https://intel.neosec.eu/en/cve/CVE-2026-113815"><img src="https://intel.neosec.eu/badge/cve/CVE-2026-113815.svg?lang=en" alt="CVE-2026-113815 – NEOSEC Intel" height="20"></a>